Overview

overview

4

Static

static

4

MeshServiceXPE.pdf

windows10-1703-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    MeshServiceXPE.pdf

  • Size

    1.4MB

  • MD5

    936c188cefd3d08adbbd858c6c8e5d66

  • SHA1

    2458869e38de728402022a3fc3d62fe5588b130a

  • SHA256

    dcb15f92bf727cbbcfc23f170713631a294a5b6826bad2b8b6739504e41b9bbd

  • SHA512

    73fc89ff5acbbe96a7c0db17a7009df3009807f2cd5bfe9b8199ab82b9ea241ce4bb0a82ff9813ff36eda41062a4375084288dd502547881b587f76279b002aa

  • SSDEEP

    24576:dHsMgu50YLgaUOt3/ToawKprfKwFHVIqnS2+9Dbthjf4j3cieJ2iSek0G:DNLtUy/tHaqCbthjf4j3neJ2iSe2

Score
4/10
pdflink

Malware Config

Signatures

  • HTTP links in PDF interactive object 1 IoCs

    Detects HTTP links in interactive objects within PDF files.

    pdflink
  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

    pdflink

Files

  • MeshServiceXPE.pdf
    .pdf

    • https://github.com/Ylianst/MeshCentral

    • https://github.com/Ylianst/MeshCentral/blob/master/agents/MeshService.exe

    • https://meshcentral.com/

    • https://meshcentral2.blogspot.com/