Overview

overview

10

Static

static

10

304a28d5e9...85.pdf

windows10-1703-x64

1

form.exe

windows10-1703-x64

10

Resubmissions

21/05/2023, 21:12

230521-z2jqgacd89 10

21/05/2023, 21:08

230521-zyyp8afc61 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    304a28d5e9010331c8f183b5932d0420410cf5e749f84cdd02d9992abd397285

  • Size

    59KB

  • MD5

    85c93cc5259ec43aab31b1505292ba4c

  • SHA1

    ac94bac5207360991be8ace9f926fbe1cf68e3c9

  • SHA256

    304a28d5e9010331c8f183b5932d0420410cf5e749f84cdd02d9992abd397285

  • SHA512

    ce5155ef6baff442faebfbbd22837f15b4ad6b3b752fa1db249d1de3b578b5c4113620b7ff2241d3e63150f4d8cbe110a9681b89046fd077c7aee7428693cdd3

  • SSDEEP

    1536:TLcUj5PyUY5UWHjwKvkbLXx2gJoteRWglkUsh:TQUF6UY5FjlvW9LpQMZsh

Score
10/10
pdfjavascriptmetasploit

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

172.104.56.177:1337

Signatures

  • Metasploit family
    metasploit
  • PDF contains JavaScript

    Detects presence of JavaScript in PDF files.

    pdfjavascript
  • PDF contains one or more embedded files

    Detects presence of embedded files in PDF files.

    pdf
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 304a28d5e9010331c8f183b5932d0420410cf5e749f84cdd02d9992abd397285
    .pdf
  • form.pdf
    .exe windows x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections