aa70f965275dc740cebcb2d6d4c227aa32627d8c7c15b07aa41cb836ffc9f0b1

Analysis

max time kernel
150s
max time network
41s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
08-09-2022 07:26

Target

aa70f965275dc740cebcb2d6d4c227aa32627d8c7c15b07aa41cb836ffc9f0b1.pdf
Size

99KB
MD5

4dd10f5e3fdaaeb09b15b23a2fd98ee1
SHA1

eec54c0f979a3b80ddcf2846f90c63670795eeaa
SHA256

aa70f965275dc740cebcb2d6d4c227aa32627d8c7c15b07aa41cb836ffc9f0b1
SHA512

d1f8c7ffa3352c58acd35116003530ac31bbb16fc982d6e4e7518a772cd7eff0d789a11088065fe4d44ed5bb193dcb93fda9f6c3bd9ee310920c951967cfea01
SSDEEP

3072:BaGN8hMm5GtqlXOuSIY/lc8Nx0nFd3ak/M:EG7ViQ3Ql/M

Score

1^/10

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

896 AcroRd32.exe
896 AcroRd32.exe
896 AcroRd32.exe
896 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\aa70f965275dc740cebcb2d6d4c227aa32627d8c7c15b07aa41cb836ffc9f0b1.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:896

memory/896-54-0x0000000075041000-0x0000000075043000-memory.dmp

Filesize
8KB

Download