ef925481463e2ec574ba917146b12c51df53c4bd1c63f36b225b12d1a48c4257

Analysis

max time kernel
151s
max time network
41s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
11-10-2022 10:00

Target

ef925481463e2ec574ba917146b12c51df53c4bd1c63f36b225b12d1a48c4257.pdf
Size

274KB
MD5

307e6a23fc5fcd2a6f03ce4015e0b9f0
SHA1

aa19ac8cf5348e3355ee3e4ffcdd2ae1c5855448
SHA256

ef925481463e2ec574ba917146b12c51df53c4bd1c63f36b225b12d1a48c4257
SHA512

954f48dd330e29ae2ade131f42dedd2ae4ce3261cfbd18ae7eb40a9081c5785fb2c440e833300a9db34b3af06942b7ea7cbfd25e5e28ec66f912cf149b7dd794
SSDEEP

6144:G9Kaf6/dDCYXfL9Fl9rlR1IZx0tih/mWmmDQpBS:G9kDCYRFflR0x0trGQK

Score

1^/10

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1976 AcroRd32.exe
1976 AcroRd32.exe
1976 AcroRd32.exe
1976 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ef925481463e2ec574ba917146b12c51df53c4bd1c63f36b225b12d1a48c4257.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1976

memory/1976-54-0x00000000762B1000-0x00000000762B3000-memory.dmp

Filesize
8KB

Download