47cc557cdd57fe6a1b2dfe10d488681299ccb5b87dec604960c6c885d7284998

Analysis

max time kernel
104s
max time network
49s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
10-10-2022 15:39

Target

ѧ/ ExcelԶָߵļ㰸��.pdf
Size

646KB
MD5

a5768a61eaa13eb6407ef83a35e7b197
SHA1

973e533eeaa2dcc43d135e8c29e5c1fad90de886
SHA256

10311ac982a0dd2037e98e02a83164da14b4c7cddda838a7e909bdbcab02b608
SHA512

8e0f448262f741b3373431f07d5a41a13f85d4cc02ffb7ff4fbbc6de8624b0e85c5713ed40f0613688889dc9473622dea446c57cac72fa78a9d0e2ce0acf7e4b
SSDEEP

12288:amCc80quQPUkalr7h1ik1ZMKm4E6YdXhp8PDqCAbYq:ic80qnskaV7hs6N/E/bKDqNbl

Score

1^/10

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1064 AcroRd32.exe
1064 AcroRd32.exe
1064 AcroRd32.exe
1064 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ѧ\ ExcelԶָߵļ㰸��.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1064

memory/1064-54-0x0000000075BB1000-0x0000000075BB3000-memory.dmp

Filesize
8KB

Download