ba2cd9c7298e285500059a752b5bf463bbb88ddf7bea6a9916fd4cb7d0db2f6f

Analysis

max time kernel
151s
max time network
57s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
19-09-2022 12:58

Target

ba2cd9c7298e285500059a752b5bf463bbb88ddf7bea6a9916fd4cb7d0db2f6f.pdf
Size

396KB
MD5

3168ae299fc2a33189a0afb2c945c990
SHA1

b8780d031ee12235e23617d2752cf1eecd484a06
SHA256

ba2cd9c7298e285500059a752b5bf463bbb88ddf7bea6a9916fd4cb7d0db2f6f
SHA512

2ae6c068861377de6224b09d772eac9a0a6cc3f25939d24a95a133e945210b6a46e7f90badd5a4d0db79120ba3f58df60b7eaabffd089329bc605e335c87ddba
SSDEEP

6144:CjPPr2rw4VGqForYmFWeU662+nGuig4Q6eD2S1l79DTIDXkgpU7sCmTPA:CjPz2M4VJKFbunGuig4QRr1l71IgzHMA

Score

1^/10

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

2036 AcroRd32.exe
2036 AcroRd32.exe
2036 AcroRd32.exe
2036 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ba2cd9c7298e285500059a752b5bf463bbb88ddf7bea6a9916fd4cb7d0db2f6f.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2036

memory/2036-54-0x0000000075131000-0x0000000075133000-memory.dmp

Filesize
8KB

Download