f73fccc50cda7bc1f80239ec7c5bfaffdca7b62db4623c65944db32c938eefa9

Analysis

max time kernel
171s
max time network
45s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
27-11-2022 02:55

Target

ͬļ--豸/2.ְͬר.pdf
Size

158KB
MD5

cf2b629036686b45828c9f635a628960
SHA1

6b8de94114bf70a3926be3b457bbb24a696997e6
SHA256

e9995ea4257ef0dff283628e5cab9a2e3659b5bd78ded4d9edeb545ec1375b71
SHA512

67ae2402e5dd93a87616e2810974a213aa4144df4d5cb350ef177c368aa14cd4f9d9ba8f666c5b9f44ffd76914a93d405187cea802874e2c90bc72cfa09f9d41
SSDEEP

3072:H+AnGGgJNL5N99eTdgxrw6dD35r4AvDMubRjMKbqhFIDqLhgQ5f7h1eP+zz:Z2NL5V+MXxNbYubS17IqdkCz

Score

1^/10

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1716 AcroRd32.exe
1716 AcroRd32.exe
1716 AcroRd32.exe
1716 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ͬļ--豸\2.ְͬר.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1716

memory/1716-54-0x0000000076261000-0x0000000076263000-memory.dmp

Filesize
8KB

Download