Overview

overview

10

Static

static

10

0e88c881a1...61.pdf

windows7-x64

1

0e88c881a1...61.pdf

windows10-2004-x64

1

form.exe

windows7-x64

10

form.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0e88c881a1870293eb05c853da217161

  • Size

    59KB

  • MD5

    0e88c881a1870293eb05c853da217161

  • SHA1

    c5ebcac5e716593105b07a10d17ec4fbd57f9dbe

  • SHA256

    e6620a4e6a247b550ae91dd362dbca018ab0c621c0982e20c4e714e431dbd1ff

  • SHA512

    bc3fbd241a3c495fa14ccd149c6b26d1fb6f951eb7a3b5a1c34bb999f87544b3f71353b8c4fa6085987d12522024c199da5036a93235421c8daf404f5dfd8736

  • SSDEEP

    1536:TLcUj5jhCtTbZNBQ66R+R4RrYlDYkRpCIHG7upfNxy5yd:TQUFjhCtXZN+hRe4qJYOpLG7OfNxyId

Score
10/10
pdfjavascriptmetasploit

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://192.168.0.144:443/AXGDO

Signatures

  • Metasploit family
    metasploit
  • PDF contains JavaScript

    Detects presence of JavaScript in PDF files.

    pdfjavascript
  • PDF contains one or more embedded files

    Detects presence of embedded files in PDF files.

    pdf
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0e88c881a1870293eb05c853da217161
    .pdf
  • form.pdf
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections