a8f5a6f0cf3b07da374cfb174e655b328554424ba87a719474b43383ea12dc5d

Analysis

max time kernel
150s
max time network
51s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
28-10-2022 07:38

Target

a8f5a6f0cf3b07da374cfb174e655b328554424ba87a719474b43383ea12dc5d.pdf
Size

2.0MB
MD5

2b851e596b127f64e6592c4172aa62fd
SHA1

c33501d4f9d6736d9ddf6624ed278e7b7f150220
SHA256

a8f5a6f0cf3b07da374cfb174e655b328554424ba87a719474b43383ea12dc5d
SHA512

fa0ca95d42b7ccb5af9a37867414a44937aba2d94d0b4f66db70e57420c41e7deb72dab3fbe4221934313378bd027cca8aed139409a5bf8dbd76be274772cda2
SSDEEP

49152:3h3KcJVDBnhYQt0enk+QWihD5YXvoAzQxwEEmYserg:x3KcDNh66QZDugAmwjmYsv

Score

1^/10

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1268 AcroRd32.exe
1268 AcroRd32.exe
1268 AcroRd32.exe
1268 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a8f5a6f0cf3b07da374cfb174e655b328554424ba87a719474b43383ea12dc5d.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1268

memory/1268-54-0x00000000757A1000-0x00000000757A3000-memory.dmp

Filesize
8KB

Download