Overview

overview

3

Static

static

3

Agenda21.pdf

windows10-2004-x64

1

ImportantI...on.exe

windows10-2004-x64

1

RocketScience.pdf

windows10-2004-x64

1

nato secur...ng.pdf

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    restricted.zip

  • Size

    3.8MB

  • MD5

    c77f50ccb98f86f1624be4b738a1ce2b

  • SHA1

    42a4a54453979dd5220ed339be7aa27de360915a

  • SHA256

    d5aeb3e547e305d2f7cdbf8612d065c658be9fed03f0c567912573e21ace80b3

  • SHA512

    f477bacc59013f42f21baf819be14147b00fa393f9c294d7817a09137bfcfa66b1d8e5a80068a177a4c4050d5511f3298bd9c2ffd7c42fa2e2e9d919197e6d37

  • SSDEEP

    98304:IKxfXnevS3KUmxwML9cjT+3xeBPc77hdXn9NWjo7ntNOwhqzIGd:RxfXeumxwaZfvhd39NZlqzIGd

Score
3/10
pdflink

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

    pdflink
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • restricted.zip
    .zip

    Password: LkUUjd_8hh!

  • Agenda21.pdf
    .pdf

    Password: LkUUjd_8hh!

    • http://www.un.org/esa/sustdev/agenda21.htm.

  • ImportantInformation.exe
    .exe windows x64

    Password: LkUUjd_8hh!

    c7269d59926fa4252270f407e4dab043


    Headers

    Imports

    Sections

  • RocketScience.pdf
    .pdf

    Password: LkUUjd_8hh!

    • http://creativecommons.org/licenses/by-nc-nd/3.0/

    • http://nasa.gov

    • http://socal.rr.com

  • nato security briefing.pdf
    .pdf

    Password: LkUUjd_8hh!