Resubmissions

18/12/2023, 16:24

231218-twge9sbfbj10

18/12/2023, 16:13

231218-tn61ysdbb510

16/12/2023, 20:09

231216-yxhryacgdn10

16/12/2023, 20:05

231216-yt6dtseba510

16/12/2023, 19:50

231216-ykngnacfhr10

16/12/2023, 19:47

231216-yhsnlacfhn10

16/12/2023, 19:43

231216-yfc55acfgq10

16/12/2023, 19:36

231216-ya7gsaeac910

General

  • Target
    password_guidance.pdf
  • Size 627KB
  • Sample231216-yfc55acfgq
  • SHA256 25c9c2dfaf151675191d6c4ff2ed8f1271a8f075dc745f72a225be16e59bb7ed
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • metasploit

Version
  • windows/reverse_tcp

C2
  • 192.168.64.2:5555

Signatures

  • Metasploit family
  • PDF contains JavaScript

    Detects presence of JavaScript in PDF files.

  • PDF contains one or more embedded files

    Detects presence of embedded files in PDF files.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • password_guidance.pdf
    .pdf 627KB
  • A5-leaflet-password-advice-for-ALs-v2.pdf
    .exe 72KB

password_guidance.pdf

  • SHA256 25c9c2dfaf151675191d6c4ff2ed8f1271a8f075dc745f72a225be16e59bb7ed
  • MD5 SHA1 SHA512 SSDEEP