053b0c4feb91a817d475e793e43ddb2cb299b894ca8b8188ae6dbd3904842b72 | Triage

Analysis

max time kernel
151s
max time network
119s
platform
windows7_x64
resource
win7-en-20210920
submitted
14-10-2021 05:04

Sharing

Report Analysis Logs

General

Target

NEW_ITEMS_2021105130.pdf
Size

187KB
MD5

40380dd9415d973db89f779ee0f474d4
SHA1

a428c8265bee9027c92cd95510d7bcecf82cde10
SHA256

053b0c4feb91a817d475e793e43ddb2cb299b894ca8b8188ae6dbd3904842b72
SHA512

e33686fcf1217515d1f1d9c66755b9bca32b604c2ada3409119d9be11499fcc1960c9476bc9c4239167ae87a25811997ced140bc007f3aaef003a153c878e0bd

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1500 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1500 AcroRd32.exe
1500 AcroRd32.exe
1500 AcroRd32.exe
1500 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEW_ITEMS_2021105130.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1500

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1500-53-0x00000000767F1000-0x00000000767F3000-memory.dmp

Filesize
8KB

Download