evil.pdf
- SHA256 f072b16fd37ede3d636f5342c1aced57ce69649f53766723201d4ff4cce56f27
General
- Target evil.pdf
- Size 3KB
- Sample231013-cdfmksca27
- SHA256 f072b16fd37ede3d636f5342c1aced57ce69649f53766723201d4ff4cce56f27
Score
10/10
Malware Config
Extracted
Family
-
metasploit
Version
-
metasploit_stager
C2
-
10.0.2.15:4444
Signatures
- Metasploit family
- PDF contains JavaScript
Detects presence of JavaScript in PDF files.
- PDF contains one or more embedded files
Detects presence of embedded files in PDF files.
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
File Explorer
-
evil.pdf
-
template.pdf