Behavioral task
behavioral1
Sample
testdisk.pdf
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
testdisk.pdf
Resource
win10v2004-20231023-en
General
-
Target
testdisk.pdf
-
Size
239KB
-
MD5
ba1b8ffd3f6c3fe555e5c47f79d49481
-
SHA1
d0586493c5e47a025dd022e1d96eefaf3f94343d
-
SHA256
6f0a85b660e5ebb4ac2f86fbf4dfce98ccaefa481899dbb9b0fdbccb83553000
-
SHA512
a2770fa91e2a4c788a8f4d2d2d5db38cd5a033fe0858f0956660a663f8ada1a99890c2572d6676714f8e77f455df0a86384570ea23e4af1b758dea5b9dd5135f
-
SSDEEP
6144:COEzE1MHyzJ08KGHlDL2u+gHlZBh7S4Gr4AAinFA3sOLkV:CE1pzO8KFuHb7S4/XoFfnV
Malware Config
Signatures
Files
-
testdisk.pdf.pdf
-
https://www.cgsecurity.org/
-
https://github.com/cgsecurity/testdisk_documentation
-
https://www.cgsecurity.org/wiki/TestDisk_Download
-
https://www.cgsecurity.org/testdisk-7.0.linux26-x86_64.tar.bz2
-
https://www.cgsecurity.org/testdisk-7.1-WIP.linux26-x86_64.tar.bz2
-
https://cygwin.com/
-
https://mingw-w64.org/
-
https://copr.fedorainfracloud.org/coprs/grenier/cygwin-testdisk/
-
https://copr.fedorainfracloud.org/coprs/grenier/mingw-testdisk/
-
https://en.wikipedia.org/wiki/Static_build
-
https://getfedora.org/fr/workstation/download/
-
https://github.com/downloads/openSUSE/kiwi/ImageWriter.exe
-
http://www.netbsd.org/~martin/rawrite32/
-
https://fedoraproject.org/wiki/How_to_create_and_use_Live_USB
-
http://en.wikipedia.org/wiki/Direct-attached_storage
-
http://en.wikipedia.org/wiki/Storage_area_network
-
http://en.wikipedia.org/wiki/Network-attached_storage
-
https://technet.microsoft.com/en-us/library/ff829851(v=ws.11).aspx
-
https://support.microsoft.com/en-us/kb/865219
-
https://technet.microsoft.com/en-us/library/Cc753659.aspx
-
https://www.cgsecurity.org/wiki/File_Formats_Recovered_By_PhotoRec
-
https://www.cgsecurity.org/photorec/
-
http://www.cgsecurity.org/wiki/Developers#Adding_a_new_file_format_to_PhotoRec
-
https://github.com/lconte/Copy-PhotoRecFilesbyExtension.ps1
-
https://github.com/tfrdidi/sort-PhotorecRecoveredFiles
-
http://www.sno.phy.queensu.ca/~phil/exiftool/
-
https://sourceforge.net/projects/smartmontools/files/smartmontools/
-
https://sourceforge.net/projects/ddrutility/
-
https://sourceforge.net/projects/dftt/files/Test%20Images/6_%20FAT%20File%20Recovery%20%231/
-
https://sourceforge.net/projects/dftt/files/Test%20Images/7_%20NTFS%20File%20Recovery%20%28and%20Leap%20Year%29%20%231/
-
http://PhotoRecunderLinux................................186.4RunningQPhotoRecunderLinuxX.org
-
https://www.cgsecurity.org/.TheyaredistributedundertheGNUGeneralPublicLicensev2orlater,youcan
-
https://github.com/cgsecurity/testdisk_documentation.Anyonecancon-tributetoTestDisk&PhotoRecdocumentation.Weespeciallywelcomethecontributionsofbeginners.Infact,begin-nershaveadistinctadvantageovertheexperts,becausetheycanmoreeasilyspottheplaceswheredocumentationislacking.Ifit'sonlyto
-
https://www.cgsecurity.org/wiki/TestDisk_DownloadCurrentlywehave
-
https://www.cgsecurity.org/testdisk-7.0.linux26-x86_64.tar.bz2forthelaststableversion
-
https://www.cgsecurity.org/testdisk-7.1-WIP.linux26-x86_64.tar.bz2forthedevelopmentversionThearchivescontainsstaticbinariesforIntel
-
http://noneedtoberoottarxjftestdisk-7.1-WIP.linux26-x86_64.tar.bz
-
https://cygwin.com/isalargecollectionofGNUandOpenSourcetoolswhichprovidefunctionalitysimilartoaLinuxdistributiononWindows,itincludesthegcccompiler.ADLL
-
https://mingw-w64.org/isafreeandopensourcesoftwaredevelopmentenvironmentforcreatingMi-crosoftWindowsapplications.ItprovidesGCCforWindows64&32bits.3.2CrossCompilationenvironmentUsingLinux,it'spossibletogeneratebinariesforWindows.Twocross-compilertoolchainsareavailableunderFedoraandCentOS7tocreatebinariesforWindows32and64bits.Allpackagesneededareavailableat
-
https://copr.fedorainfracloud.org/coprs/grenier/mingw-testdisk/testdisk,photorecand
-
https://www.cgsecurity.org/wiki/TestDisk_Download,run8Chapter3.Buildingfromsource
-
http://Release7.1tarxjftestdisk-7.1-WIP.tar.bz
-
https://git.cgsecurity.org/testdisk.gitIfyouhavealreadyclonedtheproject,toupdateyourlocalcopy,rungitpullfromthetestdiskdirectory.cdtestdiskmkdirconfigautoreconf--install-Wall-Iconfig./configuremake3.3.3CompilingastaticversionOnceyouhavebeenabletobuilda
-
https://getfedora.org/fr/workstation/download/4.1Windows
-
https://fedoraproject.org/wiki/How_to_create_and_use_Live_USB4.5.StartingfromtheUSBstick13
-
http://224toactivateit.6.4RunningQPhotoRecunderLinuxX.org
-
http://002cialLinuxbinariesfromwww.cgsecurity.org
-
http://cgsecurity.org
-
http://www.cgsecurity.org
-
https://technet.microsoft.com/en-us/library/ff829851
-
https://support.microsoft.com/en-us/kb/865219onhowtoshow
-
https://technet.microsoft.com/en-us/library/Cc753659.aspxNote:macOS/Linux-Tochangetheownerofthe
-
http://050.mov/.mp4
-
http://youshouldseethatthenamesalternatesbetween_ftyp.movand_mdat.mov
-
http://andruntypefile2_ftyp.movfile1_mdat.mov
-
http://test.mov
-
http://andruncatfile2_ftyp.movfile1_mdat.mov
-
http://Playtheresultingtest.mov
-
https://github.com/lconte/Copy-PhotoRecFilesbyExtension.ps114.1.2UsingaPythonscriptPythoncomespreinstalledonmacOSandmostLinuxdistribution.ItcanalsobeinstalledunderWindows.ThePythonprogramsort-PhotorecRecoveredFiles
-
http://www.sno.phy.queensu.ca/~phil/exiftool/47
-
http://sourceforge.net/projects/smartmontools/
-
https://raw.githubusercontent.com/Homebrew/install/master/,!install
-
http://002x_copy.zip
- Show all
-