47cc557cdd57fe6a1b2dfe10d488681299ccb5b87dec604960c6c885d7284998

Analysis

max time kernel
150s
max time network
45s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
10-10-2022 15:39

Target

ѧ/һڶָ߸( ָ).pdf
Size

341KB
MD5

1987e12136c9764a223cf726a04472c5
SHA1

f48f4106682f09b4caa27c3b43f17f2cc648f4f3
SHA256

1b67f834b79ae64babb5af1382976a15eae8a5918d6e0e6fa07e41327c55f6a1
SHA512

2d67add7eaed932d08d940f52243b44b67a1ac8b6cdb2aa35adb138ef56e770964dc9be1dffa01eeb865fc8cb8fcb98fa72146cc0256b3061b0310844f0ae4f9
SSDEEP

6144:kXa2a8IcpV3I2SihZqjYjsjLB1dJydeY2yn3Gvuwc7GP7K:kq2Rbv3WhzjLe7nNc7K

Score

1^/10

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

532 AcroRd32.exe
532 AcroRd32.exe
532 AcroRd32.exe
532 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ѧ\һڶָ߸( ָ).pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:532

memory/532-54-0x0000000075091000-0x0000000075093000-memory.dmp

Filesize
8KB

Download