9b44bbf820d78e4510df54e9df564bc2246111b516c4dee0b60444429d539606

Analysis

max time kernel
151s
max time network
50s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
21-10-2022 09:59

Target

9b44bbf820d78e4510df54e9df564bc2246111b516c4dee0b60444429d539606.pdf
Size

310KB
MD5

1a36171042ffb945d0c6160e23a0ac54
SHA1

0c5dd3976c47aa2462cbb6f1881c99017e7d2b8f
SHA256

9b44bbf820d78e4510df54e9df564bc2246111b516c4dee0b60444429d539606
SHA512

66e9a2b07cf83eec2673f506d620fdd5461d815e3a11fbfadead55a7faeff2fa91b482ece96f0d4f959149d24fe4bd7ef0d074206cd22b9f63fc252300f0c4ba
SSDEEP

6144:Eo4ZxLC+65TlCfEtx4aprTwqhPifWwqXspfi1jUbb2wYZtIiVCATlP6Q:KZxpuTgC4AYqhKulXsgW6bZtxlb

Score

1^/10

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1200 AcroRd32.exe
1200 AcroRd32.exe
1200 AcroRd32.exe
1200 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\9b44bbf820d78e4510df54e9df564bc2246111b516c4dee0b60444429d539606.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1200

memory/1200-54-0x0000000075AC1000-0x0000000075AC3000-memory.dmp

Filesize
8KB

Download