eeb68523df4243b3032711a38b6a1380e9e7d1bb0306b02793565a6e95973580

Analysis

max time kernel
149s
max time network
166s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
08/01/2024, 03:38

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
4a56ac71f97e0bee5e52d9b5705445de.pdf
Size 321KB
Sample240108-d7kn3aadhq
SHA256 eeb68523df4243b3032711a38b6a1380e9e7d1bb0306b02793565a6e95973580
MD5 4a56ac71f97e0bee5e52d9b5705445de
SHA1 ee708f2558b63f2ad619dfb1cda8e32371da032a
SHA512 b19c801b29e38c63380cd45d1f296ec4d797e5ef72caa59d130c031d75826cbc50a5ee1ebe0a7151129beacaad53f988e53ffe1cc2e8bd2b31022246fdf06be1
SSDEEP 6144:xkWKAySsP7R3L6jVaVT7uGX5T+WU1U+06w5OhuNS/mOrT58NDpuq4ZkImep:xk+ySsP7R3ejEVT7uGX5T+B1b06w5Ohp
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	AcroRd32.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
4020	AcroRd32.exe
4020	AcroRd32.exe
4020	AcroRd32.exe
4020	AcroRd32.exe

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4a56ac71f97e0bee5e52d9b5705445de.pdf"
1⤵
- Checks processor information in registry
- Suspicious use of SetWindowsHookEx
PID:4020

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads