aacbe23c245cb8f37480607ef62bf9a7fbc4834eaade34b5fd4eeed04a6fc1db | Triage

Analysis

max time kernel
150s
max time network
124s
platform
windows7_x64
resource
win7-20230712-en
resource tags

arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
submitted
16-08-2023 15:24

Sharing

Report Analysis Logs

General

Target

Seedfolks_ Rubric.pdf
Size

13KB
MD5

3e8239a0831498180da36d3a3361ff3f
SHA1

8823b56e1a376f52a32437f7912923a109f4d381
SHA256

aacbe23c245cb8f37480607ef62bf9a7fbc4834eaade34b5fd4eeed04a6fc1db
SHA512

6c477ac5dc8673e5d5a0f05340f52697380c0609f862c876986cf8177daae594fcc03aab10f2760f721604ec1891db32283b1043c84120b165357386776dbd09
SSDEEP

384:jHsUpUJXrgXhHeK4JKHCF0r7t/Fc9ublFbKnFn59dsgN4KBhc2lz:vOrcZmJZO7t65vp

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2372	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2372	AcroRd32.exe
2372	AcroRd32.exe
2372	AcroRd32.exe
2372	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Seedfolks_ Rubric.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2372

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
6782c930062e7b4743ff097b91d45ec1

SHA1
1500c153bba38ab0e32ac569f310573202fa08e9

SHA256
5534af7303b0f05d37d3d19a72c24a7e017a6c86ceb7ab1d0561d7b22d2913f5

SHA512
a1972fd39ba1c65640171b107e38b3c11915b49c3712d19dd95f3adb6f22f5fab2794b139f3ecc3b3fb9080ec2642035688818c0456f206b73a5d9a4328cc0bd

Download Submit