f4bb12466b3f7df6ae4b20e0cbb82a831553f894f0121deb1c48c690ff6e7ae0

Analysis

max time kernel
150s
max time network
45s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
15-09-2022 18:15

Target

f4bb12466b3f7df6ae4b20e0cbb82a831553f894f0121deb1c48c690ff6e7ae0.pdf
Size

4.5MB
MD5

bc61bf146f9add660226fcf9a6281ef8
SHA1

b30e82f61b0303fb296d05670e2fbbb943dbcb61
SHA256

f4bb12466b3f7df6ae4b20e0cbb82a831553f894f0121deb1c48c690ff6e7ae0
SHA512

6edc6fedb8bf512888995ad217ab6d069fdde28ce2210389d95c09a7b1625dfcb00e292aee7a36e25db7f41ad677dfc205890b703003acb0216aa48a2c0a3b3c
SSDEEP

98304:lrT1/reOGO9EwpUW+ERmQVW6OzXO07UhMpKe1MCnOPcFpzDS:lrprhGkO4jTOzfNweiP6e

Score

1^/10

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1912 AcroRd32.exe
1912 AcroRd32.exe
1912 AcroRd32.exe
1912 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f4bb12466b3f7df6ae4b20e0cbb82a831553f894f0121deb1c48c690ff6e7ae0.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1912

memory/1912-54-0x00000000763F1000-0x00000000763F3000-memory.dmp

Filesize
8KB

Download