922c1f372a8e5e58321a403ec7c24bc29f3e0718ce3a6a4f4e1a8ef57f4c9cb6

Analysis

max time kernel
146s
max time network
49s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
18-10-2022 09:58

Target

922c1f372a8e5e58321a403ec7c24bc29f3e0718ce3a6a4f4e1a8ef57f4c9cb6.pdf
Size

13.6MB
MD5

6c30508ca33759e1553be0900d039849
SHA1

facb3c21e462a3003d9922cd36890333053938db
SHA256

922c1f372a8e5e58321a403ec7c24bc29f3e0718ce3a6a4f4e1a8ef57f4c9cb6
SHA512

a6c33f7e0103a039f5d8f8b55a98e6a67b668e65d9f8a1501ba267c664824cf30d557d4793bac59e39e57b7db4f3997f6cd49104abb88a38955ad36ad3013303
SSDEEP

393216:60Ov9M9vnxCyTOeG4o8f3j/iUvwvDRKumVFy6uxyRDS:FO2nwyK8f3jiUQDRKdxu1

Score

1^/10

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1484 AcroRd32.exe
1484 AcroRd32.exe
1484 AcroRd32.exe
1484 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\922c1f372a8e5e58321a403ec7c24bc29f3e0718ce3a6a4f4e1a8ef57f4c9cb6.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1484

memory/1484-54-0x0000000076BA1000-0x0000000076BA3000-memory.dmp

Filesize
8KB

Download