28e065ed926b3a6bcff125e5ae8d4d95e8e24ea6f754c4cbc0b675bf2c5dd334

Analysis

max time kernel
151s
max time network
50s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
08-09-2022 04:16

Target

ر/A_18300180006_Ԫ.pdf
Size

179KB
MD5

73eaa4329562e25e593e106f1e611294
SHA1

89ed71dc246432864bab9989fec4eecdeb558fda
SHA256

32cf29f8375007b4556f114f6162379aa42184e57ba335cc6b87cb142c0c70ef
SHA512

b5ff249d3c541d60f5013cd0641c939d44cd5155f72233124c1cd194c4ace8ac7c0445164ffad97d6b668cd9aece53500cf4f4f9c23ac997cd384edba1b653de
SSDEEP

3072:oT8Q18zwPRBsShkCXiZTZ+TMjO1wb/p7doAjs0PMkCtt0kKd6RJZzwbxME0z3:5gbpWShFXiZJqerHvEkCHA6JAxMJz3

Score

1^/10

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1444 AcroRd32.exe
1444 AcroRd32.exe
1444 AcroRd32.exe
1444 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ر\A_18300180006_Ԫ.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1444

memory/1444-54-0x0000000075D71000-0x0000000075D73000-memory.dmp

Filesize
8KB

Download