28e065ed926b3a6bcff125e5ae8d4d95e8e24ea6f754c4cbc0b675bf2c5dd334

Analysis

max time kernel
151s
max time network
41s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
08-09-2022 04:16

Target

ر/A_20300180092__20300180024_.pdf
Size

315KB
MD5

fbabdcb70e266eafff6a0c0858f3d9e3
SHA1

222088354c0830600000978b2ce6f43ea411c6c6
SHA256

d16cd263640d02ad3e8da11042189025de0c9af88d8de661b3372516769281a1
SHA512

ca6deec2e686443eae88c2a9465cdb770ae7ffddf9c24fa5f900e52c8a5eaac225783408e9673a481bff4b246b093221586185af1d7359cef3105a94f1c90d3d
SSDEEP

6144:0+H9HYp0bT+EThESvyfLnccI9Dn/Ru2HxHqiWquoAEcHZpqrCmfxbfkD:0+H9PbTfTG1fLccI9j57uodmZpqrfxbI

Score

1^/10

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

748 AcroRd32.exe
748 AcroRd32.exe
748 AcroRd32.exe
748 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ر\A_20300180092__20300180024_.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:748

memory/748-54-0x0000000074FB1000-0x0000000074FB3000-memory.dmp

Filesize
8KB

Download