Analysis
-
max time kernel
166s -
max time network
177s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
07/01/2024, 00:57
General
-
Target
479d05cb1ac19e44e77c9697f92ad86e.pdf
-
Size
12KB
-
MD5
479d05cb1ac19e44e77c9697f92ad86e
-
SHA1
97d2804980631b1a857209bc410467e51818e6ef
-
SHA256
56b29f4f02fc26dfa434cb9c5c04cf198ecb05cb28ac4bdc9d4108214e555257
-
SHA512
d71ccf3d6654de298465c05a74ac7dabdb5a39b7af2ddefc33b427d189c81bdf9c8f68f92bf8c4c18f7c45405bfa20b08363967313434c61e5446235b052ad6f
-
SSDEEP
384:DLEMMLEtysyVTy/3Ly/duhQmmmimmmummmZ98pRPFOF++:Dg/giTy/3Ly/dur3
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Suspicious behavior: EnumeratesProcesses 20 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\479d05cb1ac19e44e77c9697f92ad86e.pdf"1⤵
- Checks processor information in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx