28e065ed926b3a6bcff125e5ae8d4d95e8e24ea6f754c4cbc0b675bf2c5dd334

Analysis

max time kernel
150s
max time network
51s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
08-09-2022 04:16

Target

ر/20300180031_146457_2906940_A_20300180031_Ȼ_20307130035.pdf
Size

245KB
MD5

7908a942506e921502176a60c10d81ac
SHA1

7cc7bfe4313cc763a8c1be19861690b51e478f8d
SHA256

f6b5987759fbc31a36fa4687c0042e998a6303ff4fb4b72e8c942fc873373eed
SHA512

ce2ea30aba95fdb8ee30ab98a6c4ca653abcfddb00cfae4f3e9d7a38396281d59969252e0a05f61dfe3a28746f688f0fbd0410beaf7660894e0c174b481578bf
SSDEEP

6144:VsZQnRTgl1p2jxDUb5DibL7MJgL0giSzW/hbFNoq8z0:Vhk2heswWji/U0

Score

1^/10

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1204 AcroRd32.exe
1204 AcroRd32.exe
1204 AcroRd32.exe
1204 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ر\20300180031_146457_2906940_A_20300180031_Ȼ_20307130035.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1204

memory/1204-54-0x0000000074DE1000-0x0000000074DE3000-memory.dmp

Filesize
8KB

Download