Overview

overview

10

Static

static

10

PQR3-PDF.exe

windows7-x64

10

PQR3-PDF.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    PQR3-PDF.exe

  • Size

    72KB

  • MD5

    07f8747a9d428fba403b396a74acf677

  • SHA1

    7fc3710e361f44d2afc9ae1f88888511a409d471

  • SHA256

    d115ddd1de66d1d220ae9c1cff580c507e56bab234fc19326727f28b6503f613

  • SHA512

    08ac2133c8fdc4edb6f85be8fd11f067aed2d88a009ef2f1fdc066cdef0b7597cc7fb44ed8f0ee1bd9e17156247e7164db1b852626b412e36b857e920163a34f

  • SSDEEP

    1536:IRfPco751wrWSQVINb4tvh9ij5AtMb+KR0Nc8QsJq39:Qf0W5qrWBWgvHijSe0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

3.84.34.113:443

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • PQR3-PDF.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections