Behavioral task
behavioral1
Sample
ксакеп294.pdf
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
ксакеп294.pdf
Resource
win10v2004-20231025-en
General
-
Target
ксакеп294.pdf
-
Size
100.4MB
-
MD5
4b37b1a9df81021ee850ad8c38b11da7
-
SHA1
7f228dbc8f452c8ab621dee72f1d8d4fe3ab75d8
-
SHA256
311e2a4ab28fe7d50057caa5597f3f80896e28a0964602702fdacc9cfdbef23d
-
SHA512
ef3e984def60e1bc7b144612933412a83ad5d9f792ecf3938c196ff7a331165f7c676b80aabb748991081e5f041185719189c7b215916cc6c33ee9ac49960d9b
-
SSDEEP
3145728:WqS7rvoY6uMeSO1Ft5RufthyVrzF/7BaEP4bU+o+n:g76ubSYnift0JJ01bU+D
Malware Config
Signatures
Files
-
ксакеп294.pdf.pdf
-
https://xakep.ru/2014/01/28/61960/
-
https://xakep.ru/2023/04/26/google-authenticator-cloud/
-
https://xakep.ru/2021/04/28/no-floc-for-github/
-
https://xakep.ru/2021/04/30/vivaldi-3-8/
-
https://xakep.ru/2021/04/20/edge-floc/
-
https://xakep.ru/2021/04/14/floc-off/
-
https://xakep.ru/2021/04/19/wordpress-floc/
-
https://privacysandbox.com/proposals/topics/
-
https://privacysandbox.com/
-
https://github.com/WebKit/standards-positions/issues/111#issuecomment-1359609317
-
https://github.com/mozilla/standards-positions/issues/622#issuecomment-1372979100
-
http://www.w3.org/2001/tag/
-
https://xakep.ru/2022/05/25/duckduckgo-microsoft/
-
https://brave.com/web-standards-at-brave/6-privacy-sandbox-concerns/
-
https://xakep.ru/2023/07/13/storm-0558-attack/
-
https://xakep.ru/2023/07/24/wiz-msa-key/
-
https://techcommunity.microsoft.com/t5/microsoft-entra-azure-ad-blog/for-developers-the-first-use-cases-of-the-converged-microsoft/ba-p/244232
-
https://xakep.ru/2023/09/15/mgm-resorts-scattered-spider/
-
https://xakep.ru/2023/09/12/4th-chrome-0day/
-
https://xakep.ru/2023/09/08/apple-new-0days/
-
https://xakep.ru/2023/09/14/cve-2023-4863-mozilla/
-
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4863
-
https://www.cve.org/CVERecord?id=CVE-2023-5129
-
https://xakep.ru/2023/09/01/google-saved-dmca/
-
https://xakep.ru/2023/09/04/chastity-cage-leak/
-
https://xakep.ru/2023/09/06/asus-rce/
-
https://xakep.ru/2023/09/07/flipper-zero-ios/
-
https://xakep.ru/2023/09/08/privacy-nightmare/
-
https://xakep.ru/2023/09/11/evil-telegram/
-
https://xakep.ru/2023/09/13/wiki-eve/
-
https://xakep.ru/2023/09/20/infomation-ban/
-
https://xakep.ru/2023/09/20/icc-hacked/
-
https://xakep.ru/2023/09/26/ransomedvc-sony/
-
https://award.awillix.ru/
-
https://xakep.ru/2023/09/21/perimeter-silver/
-
https://hackerone.com/mailru
-
https://hackerone.com/reports/1348154
-
https://hackerone.com/reports/1354335
-
https://hackerone.com/reports/1350671
-
https://hackerone.com/reports/1360208
-
https://hackerone.com/reports/44157
-
https://infosecwriteups.com/vimeo-ssrf-with-code-execution-potential-68c774ba7c1e
-
https://stackoverflow.com/a/19511801
-
https://github.com/kohana/kohana
-
https://github.com/guzzle/psr7/blob/master/src/FnStream.php#L60
-
https://github.com/kohana/core/blob/bdbe81afb5a09cee4269d2e2210a0d293265231a/classes/Kohana/View.php
-
https://github.com/kohana/core/blob/bdbe81afb5a09cee4269d2e2210a0d293265231a/classes/Kohana/View.php#L346
-
https://www.php.net/manual/ru/language.oop5.magic.php#object.tostring
-
https://www.php.net/manual/en/language.oop5.magic.php#object.tostring
-
https://www.ambionics.io/blog/laravel-debug-rce
-
http://blog.orange.tw/2018/10/
-
https://webhook.site/
-
https://stackoverflow.com/a/37468673
-
https://twitter.com/rootxharsh
-
https://twitter.com/act1on3
-
https://github.com/ambionics/phpggc
-
https://hackerone.com/ryat
-
https://twitter.com/cfreal_
-
https://twitter.com/orange_8361
-
https://gist.github.com/loknop/b27422d355ea1fd0d90d6dbc1e278d4d
-
https://www.synacktiv.com/publications/php-filters-chain-what-is-it-and-how-to-use-it.html
-
https://www.youtube.com/watch?v=PWjkz8xTI8g&t=314s
-
https://twitter.com/paul_axe
-
https://xakep.ru/2023/05/30/hacking-smartphone/#toc02
-
https://xakep.ru/2023/04/26/hacker-megadrone/#toc02.1
-
https://intercom.io/
-
https://helpdesk.bitrix24.com/open/15536776/
-
https://book.hacktricks.xyz/linux-hardening/privilege-escalation/docker-security/docker-breakout-privilege-escalation
-
https://xakep.ru/2023/04/07/ntlm-relay-guide/
-
https://en.hackndo.com/ntlm-relay/
-
https://crack.sh/netntlm/
-
https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-nlmp/033d32cc-88f9-4483-9bf2-b273055038ce
-
https://en.hackndo.com/ntlm-relay/%23session-signing
-
https://github.com/jpillora/chisel
-
https://t.me/@Danr0
-
https://github.com/nccgroup/blackboxprotobuf
-
https://ru.wikipedia.org/wiki/%D0%93%D0%B5%D0%BD%D0%B5%D1%80%D0%B0%D1%82%D0%BE%D1%80_%D0%BF%D1%81%D0%B5%D0%B2%D0%B4%D0%BE%D1%81%D0%BB%D1%83%D1%87%D0%B0%D0%B9%D0%BD%D1%8B%D1%85_%D1%87%D0%B8%D1%81%D0%B5%D0%BB
-
https://ru.wikipedia.org/wiki/%D0%9B%D0%B8%D0%BD%D0%B5%D0%B9%D0%BD%D1%8B%D0%B9_%D0%BA%D0%BE%D0%BD%D0%B3%D1%80%D1%83%D1%8D%D0%BD%D1%82%D0%BD%D1%8B%D0%B9_%D0%BC%D0%B5%D1%82%D0%BE%D0%B4
-
https://www.timestampconvert.com/
-
https://viewdns.info/
-
https://xakep.ru/author/w0lfreak/
-
https://xakep.ru/author/snovvcrash/
-
https://learn.microsoft.com/en-us/windows/win32/api/ntsecpkg/nc-ntsecpkg-splsamodeinitializefn
-
https://github.com/Flangvik/SharpDllProxy
-
https://www.ired.team/offensive-security/credential-access-and-credential-dumping/intercepting-logon-credentials-via-custom-security-support-provider-and-authentication-package
-
https://github.com/mgeeky/ShellcodeFluctuation/blob/cb7a803493b9ce9fb5a5a3bc1c77773a60194ca4/ShellcodeFluctuation/main.cpp
-
https://xakep.ru/2022/06/17/shellcode-fluctuation/
-
https://gist.github.com/snovvcrash/8e2e0e0b04014c61c81761e0bddbc6ea
-
https://t.me/filexploit
-
https://ru.wikipedia.org/wiki/NXP_Semiconductors
-
https://xakep.ru/2023/07/14/pacs-rfid-hack/
-
https://github.com/zhovner/proxmark3-1/blob/master/client/default_keys.dic
-
http://www.cs.ru.nl/~rverdult/Ciphertext-only_Cryptanalysis_on_Hardened_Mifare_Classic_Cards-CCS_2015.pdf
-
https://eprint.iacr.org/2009/137.pdf
-
https://github.com/equipter/mfkey32v2
-
https://lab.flipper.net/
-
https://www.youtube.com/watch?v=ZSrOq40z1i8
-
https://xakep.ru/2022/08/22/excelsior-jet/
-
https://xakep.ru/2023/08/15/pyinstall-reverse/
-
https://ru.wikipedia.org/wiki/Cython
-
https://ru.wikipedia.org/wiki/Pyrex_(%D1%8F%D0%B7%D1%8B%D0%BA_%D0%BF%D1%80%D0%BE%D0%B3%D1%80%D0%B0%D0%BC%D0%BC%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F)
-
https://xakep.ru/2020/09/07/msi-hack/
-
https://wiki.freepascal.org/Pascal_Script/ru
-
https://github.com/dscharrer/innoextract
-
https://github.com/WhatTheBlock/innounp/tree/main
-
https://github.com/Wack0/IFPSTools.NET/tree/master/ifpsdasm
-
https://github.com/dscharrer/innoextract/files/5507287/isdsetup.1.5.exe.zip
-
https://t.me/VlaDriev
-
https://xakep.ru/2023/04/11/ntlm-relay-guide-2/
-
https://github.com/ly4k/Certipy
-
https://github.com/CompassSecurity/BloodHoundQueries
-
https://github.com/hausec/Bloodhound-Custom-Queries
-
https://habr.com/ru/users/Solar_Pentest/posts/
-
https://www.hackthebox.eu/
-
https://github.com/maurosoria/dirsearch
-
https://kali.tools/?p=108
-
https://github.com/ffuf/ffuf
-
https://github.com/danielmiessler/SecLists
-
https://github.com/ssh-mitm/ssh-mitm
-
https://github.com/carlospolop/PEASS-ng
-
https://exploit-notes.hdks.org/exploit/linux/privilege-escalation/sudo/sudo-clamav-privilege-escalation/
-
https://docs.openstack.org/install-guide/firewalls-default-ports.html
-
https://docs.openstack.org/swift/latest/overview_auth.html
-
https://github.com/imp/dnsmasq/tree/master
-
https://apisix.apache.org/blog/tags/vulnerabilities/
-
https://apisix.apache.org/blog/2021/11/23/cve-2021-43557/
-
https://vulmon.com/vulnerabilitydetails?qid=CVE-2021-35368&scoretype=cvssv3
-
https://coreruleset.org/20210630/cve-2021-35368-crs-request-body-bypass/
-
https://raw.githubusercontent.com/coreruleset/coreruleset/v3.3/master/rules/REQUEST-903.9001-DRUPAL-EXCLUSION-RULES.conf
-
https://github.com/andrew-d/static-binaries/blob/master/binaries/linux/x86_64/nmap
-
https://www.crowdstrike.com/blog/cr8escape-new-vulnerability-discovered-in-cri-o-container-engine-cve-2022-0811/
-
https://xakep.ru/2023/03/27/htb-vessel/
-
https://github.com/epi052/feroxbuster
-
https://book.hacktricks.xyz/pentesting-web/sql-injection/cypher-injection-neo4j
-
https://crackstation.net/
-
https://embracethered.com/blog/posts/2022/python-package-manager-install-and-download-vulnerability/
-
https://github.com/calebstewart/pwncat
-
https://gtfobins.github.io/gtfobins/capsh/
-
https://gtfobins.github.io/
-
https://t.me/Michaelzhm
-
https://www.ired.team/miscellaneous-reversing-forensics/windows-kernel-internals/pe-file-header-parser-in-c++
-
https://habr.com/ru/articles/266831/
-
https://kaimi.io/2011/07/pe-%D1%84%D0%BE%D1%80%D0%BC%D0%B0%D1%82-%D0%B1%D0%B0%D0%B7%D0%BE%D0%B2%D0%B0%D1%8F-%D0%B8%D0%BD%D1%84%D0%BE%D1%80%D0%BC%D0%B0%D1%86%D0%B8%D1%8F/
-
https://t.me/s0i37_channel
-
https://xakep.ru/author/apismenny/
-
https://xakep.ru/issues/xa/257/
-
https://xakep.ru/author/valentin-holmogorov/
-
https://www.behance.net/yambuto
-
https://xakep.ru/author/s0i37/
-
https://xakep.ru/2023/01/25/croc-in-the-middle/
-
https://xakep.ru/2023/02/09/very-bad-usb/
-
https://xakep.ru/2023/02/22/badusb-eth/
-
https://xakep.ru/2023/04/18/diy-pineapple/
-
https://xakep.ru/2023/04/26/hacker-megadrone/
-
https://xakep.ru/2023/05/30/hacking-smartphone/
-
https://xakep.ru/2023/06/15/hacking-smartphone-2/
-
https://xakep.ru/2023/03/23/invisible-device/
-
https://xakep.ru/2023/03/16/evil-modem/
-
https://bhv.ru/product/hakerstvo-fizicheskie-ataki-s-ispolzovaniem-hakerskih-ustrojstv/
-
https://xakep.ru/2022/01/21/flat-assembler/
-
https://forum.cxem.net/index.php?/topic/42955-%D0%B8%D0%B7%D0%BC%D0%B5%D1%80%D0%B8%D1%82%D0%B5%D0%BB%D0%B8-esr-%D0%BA%D0%BE%D0%BD%D0%B4%D0%B5%D0%BD%D1%81%D0%B0%D1%82%D0%BE%D1%80%D0%BE%D0%B2/
-
https://bobparker.net.au/esr_meter/k7214.pdf
-
https://monitor.net.ru/forum/threads/302728/page-6
-
https://integral-catalog.by/produktsiya/poluprovodnikovye-pribory/tranzistory/
-
https://habr.com/ru/companies/zeptobars/articles/179265/
-
https://sourceforge.net/projects/qucs/files/qucs-binary/0.0.19/qucs-0.0.19-win32-mingw482-asco-freehdl-adms.zip/download
-
http://iaesr.sch/
-
http://mailto:[email protected]/
-
http://mailto:[email protected]/
-
http://mailto:[email protected]/
-
http://mailto:[email protected]/
-
http://mailto:[email protected]/
-
http://mailto:[email protected]/
-
http://mailto:[email protected]/
-
http://mailto:[email protected]/
-
https://xakep.ru/contact/
- Show all
-