a4bcf7b04d27ee71cf2e00488f98469ed8bec37171e80e54be60025a74645677

Analysis

max time kernel
155s
max time network
45s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
07-09-2022 06:32

Target

Release/Battle Changes.pdf
Size

349KB
MD5

98174f0c59889d17cfad4528c52f5860
SHA1

8318b900d7d855ac1000eabe204652d3add001a6
SHA256

abe6a1853aaa55289de919ab2aa004ad3091146d8d2a5702a33a2d6e1b54c728
SHA512

a69aed64f9a59c91faaf252959ff518045b5bfb80d652fad469b9dea9775fd355981e1e84d2a8d2149c78845847d67840c365b7c626fc1b63f4a0dae1aa3a8ec
SSDEEP

6144:tNxRB2IrFbj1t9qaoIxg1O64Ti/x7puKtMgmlqjgohj5rOfY6DqWveA:tNLB1Rbj1GaoIxg1O64Ti/xQKtrECj30

Score

1^/10

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

856 AcroRd32.exe
856 AcroRd32.exe
856 AcroRd32.exe
856 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Release\Battle Changes.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:856

memory/856-54-0x0000000076151000-0x0000000076153000-memory.dmp

Filesize
8KB

Download