465c41039b7a880b3a582abfcb1a929ff55a88c7ae494638d9332468715a66e0 | Triage

Analysis

max time kernel
142s
max time network
131s
platform
windows7_x64
resource
win7-en-20211208
submitted
08-03-2022 16:21

Sharing

Report Analysis Logs

General

Target

Oyeniyi_Iseoluwa_Titiloye_-_Security_Engineer.pdf
Size

38KB
MD5

46ba28148839776265dbd0e9786d7a96
SHA1

b43806c55d8e78a05800c67f9a451db8abefdb2e
SHA256

465c41039b7a880b3a582abfcb1a929ff55a88c7ae494638d9332468715a66e0
SHA512

eeb3bbc320b5c34e2b3dd91b6cd25931ba1222825bc9a963f57aeac55b39acba3557d2c525130140406fe9349feb6f7b4a13029cf4db2b5babc5a0bfd278a8c6

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1512 AcroRd32.exe
Suspicious use of SetWindowsHookEx 3 IoCs

Processes:

AcroRd32.exe

pid process

1512 AcroRd32.exe
1512 AcroRd32.exe
1512 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Oyeniyi_Iseoluwa_Titiloye_-_Security_Engineer.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1512

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1512-54-0x0000000075191000-0x0000000075193000-memory.dmp

Filesize
8KB

Download