Overview

overview

10

Static

static

10

ce1c75279c...77.pdf

windows7-x64

10

ce1c75279c...77.pdf

windows10-2004-x64

1

template.exe

windows7-x64

10

template.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ce1c75279c8274841c5e0bab0e1d664c1749373917df91616a0ed723428aea77.zip

  • Size

    44KB

  • MD5

    6a2708ad539da74366feda2e79209991

  • SHA1

    db4a991eabea57075a707b5a3011372c0fe3c97e

  • SHA256

    c54d246e514471c28387376b2e3a221579499469753c93516d2aaaa8774bab63

  • SHA512

    685d0c1fb9ff6a13cbabf2fdacaad7f2ef05c7fe7b591489b3ee38f53e48004dc3cb2c7ce3283f3ba2301c672b822a7785b262bb8fa063336ef3c828b640190c

  • SSDEEP

    768:/ERL4zolMGndn4SMw9kq2+YEXYw9Vlc+DhcRRcfYEJSvpAqGYMSO2gOzptsCLRUZ:G40lbp9L24oKlcvLcfYIqGV1O1KClySU

Score
10/10
pdfjavascriptmetasploit

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.32.128:4444

Signatures

  • Metasploit family
    metasploit
  • PDF contains JavaScript

    Detects presence of JavaScript in PDF files.

    pdfjavascript
  • PDF contains one or more embedded files

    Detects presence of embedded files in PDF files.

    pdf
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ce1c75279c8274841c5e0bab0e1d664c1749373917df91616a0ed723428aea77.zip
    .zip

    Password: infected

  • ce1c75279c8274841c5e0bab0e1d664c1749373917df91616a0ed723428aea77.pdf
    .pdf
  • template.pdf
    .exe windows x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections