Overview

overview

7

Static

static

6

PDF.rar

windows10-2004-x64

3

analisis.pdf

windows10-2004-x64

1

informe_payload.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    PDF.rar

  • Size

    205KB

  • MD5

    23adf2753e354c84c56d988ea151f6d7

  • SHA1

    42aebbfde9f34ff4a2f9e1fe118f55f4bad6e5df

  • SHA256

    0cc3d1184459ede431afbaf85d0c6ac12f065a9d2e25488e937fb9d8a54c2633

  • SHA512

    4679f81f276a27e89d2d36982315dcb9f81283d75a1eb9881aab6a41949c11d8704b3ba99a8ce0c2f26a236e8e185f301d9de350489b046a1535977e2cc4c5cb

  • SSDEEP

    6144:wN/zsd97p1rbPIfABaKOYxFsQdZGvIU7R:wpzs37DPIfABa6hgIU7R

Score
6/10
pdflinkjavascript

Malware Config

Signatures

  • PDF contains JavaScript

    Detects presence of JavaScript in PDF files.

    pdfjavascript
  • PDF contains one or more embedded files

    Detects presence of embedded files in PDF files.

    pdf
  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

    pdflink
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • PDF.rar
    .rar
  • analisis.pdf
    .pdf

    • http://maldev.pcte.co

  • informe_payload.pdf
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections