Analysis

  • max time kernel
    168s
  • max time network
    183s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12-01-2024 06:32

General

  • Target

    55bb8c80ce853ca8bfe17f68f37cb269.pdf

  • Size

    88KB

  • MD5

    55bb8c80ce853ca8bfe17f68f37cb269

  • SHA1

    345a964b4f879d2d5395775215a8f6344af9f8ed

  • SHA256

    25dc3c11d4a0111af63d96b9c0be46bec4d76e0bc6b3d41c120712a949362873

  • SHA512

    d3d97552f9ea084dcc878d5f7e8654faa5a8bbc203e25ba5175dc888d33063f9f556e5fff8ac56c98575bf2674bc1b22e797425bc4f985cc629404da74c1f10f

  • SSDEEP

    1536:lWlNu6hqqDfzbI8ZnDJ0k2CDGIrV1ssSjtjQUo3H7mSUvWdrISoYWUpO7zT2ED/+:4lI6keDJkC5csSRjQUo3bmSvo77WEbts

Score
1/10

Malware Config

Signatures

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\55bb8c80ce853ca8bfe17f68f37cb269.pdf"
    1⤵
    • Checks processor information in registry
    • Suspicious use of SetWindowsHookEx
    PID:3660

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads