Behavioral task
behavioral1
Sample
Rtfm (Ben Clark) (Z-Library).pdf
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
Rtfm (Ben Clark) (Z-Library).pdf
Resource
win10v2004-20230915-en
General
-
Target
Rtfm (Ben Clark) (Z-Library).pdf
-
Size
10.2MB
-
MD5
4e34290b25a81c1132b46be57d181ad4
-
SHA1
1891e95b45595b1938804f137c571514c5ace421
-
SHA256
61ba2ef6dcbb62983bf9f385f07726c83767546a001e4fcb10fff471763b8da5
-
SHA512
17d5ce79d5226bb08ec91351ccbea301052d6f08dba35d58d064a4a6aaef6d0c7862dceacfcb43b085801adc8ff1a0316c0dd4bbaa4867c4357ac33ebe826778
-
SSDEEP
196608:UQOld7J8ZRbtk3BYd9sVr6N21TFAmkJXVgMYKTplZkNxXygMGXcH:URld7J8ZlGGMm2gm6INogMGXcH
Malware Config
Signatures
Files
-
Rtfm (Ben Clark) (Z-Library).pdf.pdf
-
http://www.sans.org/info/63023
-
http://www.sans.edu/info/63053
-
http://www.sans.org/info/63018
-
http://www.sans.org/info/63048
-
http://www.sans.edu/info/63013
-
http://www.sans.org/info/63043
-
http://www.sans.org/info/63038
-
http://www.sans.org/info/63033
-
http://www.sans.org/info/63028
-
http://tcp.url.com
-
http://file.tar.bz
-
http://zipname.zip
-
http://.tar.bz
-
http://url.com
-
http://domainl.com
-
http://domain2.com
-
http://domain3.com
-
http://_www._tcp.url.com
-
http://roorn362.com
-
http://www.ntdsxtract.com
-
http://code.google.com/p/libesedb/
-
http://Sjstex.Net.Networkinformation.ping
-
http://file.zip
-
http://rnaster.zip
-
http://www.Jahoo.com
-
http://www.pastebin.com
-
http://www.pajpal.com
-
http://www.craigslist.org
-
http://www.google.com
-
http://wscript.shell
-
http://Shell.run
-
http://nikto.pl
-
http://snmpblow.pl
-
http://b.shell.evilexample.com
-
http://sjstem.example.com
-
http://shell.evilexample.com
-
http://jou.com
-
http://ou.com
-
http://TCPSocket.open
-
http://TCPSocket.new
-
http://io.read
-
http://backdoor.sh
-
http://http.data
-
http://server.example.org
-
http://lsearchiDATA.data
-
http://ptscripts.googlecode.com/svn/trunk/windows/vssown.vbs
-
http://dump_hash.zip
-
http://.md5.dshield.org
-
http://.malware.hash.cjmrc.J.com
-
https://fileadvisor.bit9.com/services/search.aspx
-
https://www.virustotal.com/#search
-
http://w.google.com/'},20000
-
https://login.bob.com
-
http://bob.com/directory/
-
http://bob.com/file[l-10]
-
http://wkhtmltopdf.googlecode.com/files/wkhtmltoimage-0.11.0
-
http://rc1-static-i386.tar.bz
-
http://rc1-statlc-i386.tar.bz
-
http://github.com/SpiderLabs/Nmap-Tools.git
-
https://phantomjs.googlecode.com/files/phantomjs-1.9.2-linux-x86_64.tar.
-
https://bitbucket.org/LaNMaSteR53/peepingtom.git
-
http://64.tar.bz
-
http://peepingtom.py
-
http://mytarget.com
-
http://sqlmap.py
-
http://sqlrnap.py
-
http://fi1er.read
-
http://spoof.com
-
http://cb.sh
-
http://r.read
-
http://response.info
-
http://fileweb.read
-
http://reply.show
-
https://apps.fcc.gov/oetcf/eas/reports/GenericSearch.cfm
-
http://www.radioreference.com/apps/db/
-
http://bit.ly/nucONO.
-
http://bernardodame1e.blogscat.com/2Jll/09/reverse-shel-s-one-liners.html.
-
http://forsushi.com/paoers/80211
-
http://oauldotcom.com/2012/C51remote-malware-deplo
-
http://ioptrix.com/blcq/?o=68-.
-
http://www.sans.org
-
http://nmap.org/nsedoc/
-
http://SecurityByDefault.com
-
http://scanme.nmap.org
-
http://microsoft.com/24,
-
http://www.stanford.edu
-
http://www.sans.org/staysharp
-
http://www.google.com/intl/en/help/refinesearch.htmlhttp://johnny.ihackstuff.comhttp://www.google.com/intl/en/help/cheatsheet.htmlOperator
-
http://as_ft.as
-
http://as_dt.as
-
http://www.rfc-editor.org
-
http://sans.org
-
http://isc.sans.org
-
http://www.sans.edu/admissions/procedure.php�
-
http://www.sans.edu
-
http://sans.edu
-
http://AddedBytes.com
-
http://foo.py
- Show all
-