Behavioral task
behavioral1
Sample
NEAS.60c14663eb054d962c37dc8545979500.pdf
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.60c14663eb054d962c37dc8545979500.pdf
Resource
win10v2004-20231020-en
General
-
Target
NEAS.60c14663eb054d962c37dc8545979500.pdf
-
Size
7.3MB
-
MD5
60c14663eb054d962c37dc8545979500
-
SHA1
81c661d33f273769a58a07bd0c76a5764b4b3d13
-
SHA256
47c9bb2a17d7a48fac23e331218d28e9fa47b2ccbfd406d38fbdcda142994ad2
-
SHA512
172b2c666248f1b18e541fe7532132e1c637250e8a671f8e3c3a75069552fc2e8c7476c119d7c5220c2714d6e6016e0180d70fe491cb54861498fc790f824491
-
SSDEEP
196608:zcqgvnXY8c85IDZqDI9GwWo68RlT/gUtMFPxIj:zcqgvo8brSVDgSSxS
Malware Config
Signatures
Files
-
NEAS.60c14663eb054d962c37dc8545979500.pdf.pdf
-
http://www.oracle.com/technetwork/java/javase/downloads/index.html
-
https://www.pingidentity.com/en/products/request-license-key.html
-
https://docs.pingidentity.com/bundle/pf_sm_integratePingFederateWithHSM_topic/
-
https://www.pingone.com
-
https://docs.oasis-open.org/security/saml/v2.0/saml-authn-context-2.0-os.pdf
-
https://www.oasis-open.org/committees/download.php/3406/oasis-sstc-saml-core-1.1.pdf
-
https://docs.pingidentity.com/bundle/pf_sm_discoverYourIdp_topic/
-
https://docs.oasis-open.org/wsfed/federation/v1.2/os/ws-federation-1.2-spec-os.html
-
https://www.oasis-open.org/committees/tc_home.php?wg_abbrev=wss
-
https://www.oasis-open.org/committees/tc_home.php?wg_abbrev=ws-sx
-
https://tools.ietf.org/html/rfc6749
-
https://tools.ietf.org/html/rfc7636
-
https://tools.ietf.org/html/rfc7522
-
https://openid.net/specs/openid-connect-core-1_0.html
-
http://www.simplecloud.info/
-
https://docs.oasis-open.org/security/saml/v2.0/saml-sec-consider-2.0-os.pdf
-
https://www.pingidentity.com/en/products/downloads.html
-
http://www.pingone.com
-
http://www.simplecloud.info
-
https://docs.oasis-open.org/security/saml/v2.0/saml-core-2.0-os.pdf
-
https://logging.apache.org/log4j/2.x/manual/index.html
-
https://splunkbase.splunk.com/
-
https://docs.splunk.com/Documentation/Forwarder/6.5.0/Forwarder/HowtoforwarddatatoSplunkEnterprise
-
https://www.splunk.com/en_us/download/universal-forwarder.html
-
https://velocity.apache.org
-
https://openid.net/connect/
-
http://support.pingidentity.com
-
https://tools.ietf.org/html/bcp47
-
https://docs.oracle.com/javase/8/docs/api/java/util/Locale.html#forLanguageTag-java.lang.String-
-
http://www.oracle.com/technetwork/java/archive-139210.html
-
https://tools.ietf.org/html/rfc2560
-
http://www.incommonfederation.org/participants/
-
https://documentation.pingidentity.com/pingone/employeeSsoAdminGuide/#userDirManagement.html
-
https://documentation.pingidentity.com/pingone/employeeSsoAdminGuide/#directoryCredentials.html
-
https://www.pingidentity.com/en/products/downloads/pingfederate.html
-
https://freeradius.org/radiusd/man/dictionary.html
-
https://technet.microsoft.com/en-us/library/cc773178(v=ws.10).aspx
-
https://tools.ietf.org/html/rfc7518
-
https://documentation.pingidentity.com/pingaccess/pa/pa_c_OpenID_Connect_Endpoints.html
-
https://documentation.pingidentity.com/pingaccess/pa/pa_c_Web_Sessions.html
-
https://msdn.microsoft.com/library/hh869301.aspx
-
http://www.w3schools.com/tags/ref_urlencode.asp
-
https://www.pingidentity.com/en/products/downloads/pingfederate/platform.html
-
https://docs.pingidentity.com/
-
http://www.incommon.org/participants
-
http://dev.mysql.com/doc/refman/5.7/en/server-system-variables.html
-
https://docs.oracle.com/cd/E29127_01/doc.111170/e28967/ismemberof-5dsat.htm
-
https://tools.ietf.org/html/rfc4524
-
https://tools.ietf.org/html/rfc4519
-
https://www.ldap.com/ldap-oid-reference
-
http://www.oid-info.com/
-
http://www.simplecloud.info/specs/draft-scim-api-01.html#edit-resource-with-patch
-
http://www.simplecloud.info/specs/draft-scim-core-schema-01.html
-
https://support.microsoft.com/kb/305144
-
https://admin.pingone.com
-
http://www.w3.org/TR/xmlenc-core/
-
http://www.simplecloud.info/specs/draft-scim-api-01.html#delete-resource
-
http://documentation.pingidentity.com/display/LP/Product+Documentation
-
https://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.0.pdf
-
http://www.w3.org/TR/2000/NOTE-SOAP-20000508/#_Toc478383507
-
https://docs.oasis-open.org/wss-m/wss/v1.1.1/os/wss-SAMLTokenProfile-v1.1.1-os.html
-
https://technet.microsoft.com/en-us/library/dd378897%28v=ws.10%29.aspx
-
https://documentation.pingidentity.com/pingone/employeeSsoAdminGuide/#enableAppFromCatalog.html
-
https://documentation.pingidentity.com/pingone/employeeSsoAdminGuide/#groupManagement.html
-
https://www.pingidentity.com/en/products/capabilities/application-integration.html
-
https://www.pingidentity.com/en.html
-
https://openid.net/specs/openid-connect-core-1_0.html#AuthRequest
-
http://docs.oasis-open.org/security/saml/v2.0/saml-authn-context-2.0-os.pdf
-
http://www.simplecloud.info/specs/draft-scim-api-01.html
-
http://www.simplecloud.info/specs/draft-scim-api-01.html#query-resources
-
http://www.simplecloud.info/specs/draft-scim-api-01.html#rfc.section.3.2.2.1
-
http://www.simplecloud.info/specs/draft-scim-api-01.html#rfc.section.3.2.2.2
-
http://www.simplecloud.info/specs/draft-scim-api-01.html#rfc.section.3.2.2.3
-
http://www.simplecloud.info/specs/draft-scim-api-01.html#anchor6
-
https://tools.ietf.org/html/rfc4648
-
https://msdn.microsoft.com/en-us/library/ms730879.aspx
-
https://msdn.microsoft.com/en-us/library/ff423674.aspx
-
https://tools.ietf.org/html/rfc6749#section-3.2
-
https://tools.ietf.org/html/rfc4648#section-5
-
https://tools.ietf.org/html/rfc7662
-
https://tools.ietf.org/html/rfc7009
-
https://tools.ietf.org/html/rfc6749#section-3.1
-
https://openid.net/specs/openid-connect-discovery-1_0.html#ProviderMetadata
-
https://docs.oracle.com/javase/8/docs/api/java/security/cert/X509Certificate.html
-
http://commons.apache.org/ognl/index.html
-
https://docs.oracle.com/javaee/7/api/javax/servlet/http/HttpServletRequest.html
-
http://www.telerik.com/fiddler
-
http://www.charlesproxy.com/
-
http://www.wireshark.org/
-
http://www.tcpdump.org/
-
http://www.oasis-open.org/specs/
-
https://msdn.microsoft.com/library/ms676900(v=VS.85).aspx
-
http://jgroups.org/manual/index.html#Transport
-
https://docs.aws.amazon.com/AmazonS3/latest/gsg/CreatingABucket.html
-
https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSGettingStartedGuide/AWSCredentials.html
-
http://jgroups.org/manual/index.html#_swift_ping
-
http://jgroups.org/manual/index.html#FILE_PING
-
https://openid.net/specs/openid-connect-core-1_0.html#ScopeClaims
-
http://www.pingidentity.com/solutions/saas-solutions.cfm
-
http://documentation.pingidentity.com/
-
https://ping.force.com/Support
-
http://documentation.pingidentity.com/display/JIK/Introduction
-
http://documentation.pingidentity.com/display/NETIK/Introduction
-
http://documentation.pingidentity.com/display/PHP/Introduction
-
https://documentation.pingidentity.com/
-
https://issues.jboss.org/browse/JGRP-1922
-
https://www.pingidentity.com/en/products/downloads/pingfederate/upgrade.html
-
https://docs.oracle.com/javase/8/docs/technotes/guides/vm/gctuning/
-
http://www.oracle.com/technetwork/java/javase/tech/vmoptions-jsp-140102.html
-
https://docs.pingidentity.com/bundle/ix_m_downloadDocumentation/
-
https://openid.net/specs/oauth-v2-form-post-response-mode-1_0.html
-
https://support.pingidentity.com/PingIdentityArticle?id=kA3400000008STwCAM
-
https://support.pingidentity.com/PingIdentityArticle?id=kA3400000008SgtCAE
-
http://startSLO.ping
-
http://defederate.ping/sp/cdcstartSSO.ping/sp/startAttributeQuery.ping
-
http://heartbeat.ping
-
http://writecdc.ping
-
http://adapter2adapter.ping/pf/sts.wst/pf/sts_mex.ping
-
http://federation_metadata.ping
-
http://oauth_access_grants.ping
-
http://startSSO.ping
- Show all
-