Overview

overview

3

Static

static

3

demo/ExamClient.exe

windows11-21h2-x64

1

demo/GemBo...et.dll

windows11-21h2-x64

1

demo/O2S.C...ET.dll

windows11-21h2-x64

1

demo/rule.pdf

windows11-21h2-x64

1

demo/test.pdf

windows11-21h2-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    demo-18-09-23.zip

  • Size

    2.1MB

  • MD5

    8c2f75d15c9268575c14d3c6b3e2f2ce

  • SHA1

    f845c2dd6c383689d89c8815ca414fbb67d67db7

  • SHA256

    722452c0564dad4d9ad71ca150e4ab6482a7a88fdaac525ea1e58a37f9432d76

  • SHA512

    5a489aefafddcb5de2092877126f827921c81eb427cb642bf30bea49670bac225d73bb3bb13aab158ea9cf61970ee130cef18d5b44ec448f5607210bb009b6d0

  • SSDEEP

    49152:k6Ee+R3IdyWXmQ3zpYWVxwWnKb4XaoPfzsqypi4DPcD:k9e+2hmEpY+pps0D

Score
3/10
pdflink

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

    pdflink
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • demo-18-09-23.zip
    .zip
  • demo/ExamClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • demo/GemBox.Spreadsheet.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • demo/O2S.Components.PDFView4NET.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • demo/rule.pdf
    .pdf

    • http://etc.th

  • demo/test.pdf
    .pdf