Overview

overview

6

Static

static

6

test.pdf

windows7-x64

4

test.pdf

windows10-2004-x64

3

5.pdf

windows7-x64

3

5.pdf

windows10-2004-x64

3

has been v... .xlsx

windows7-x64

3

has been v... .xlsx

windows10-2004-x64

1

decrypted.xlsx

windows7-x64

3

decrypted.xlsx

windows10-2004-x64

1

Resubmissions

05/08/2024, 10:46

240805-mtzqhatfmn 6

05/08/2024, 10:43

240805-msad8aterp 6

Sharing

Copy URL Twitter E-mail

General

  • Target

    test.pdf

  • Size

    96KB

  • MD5

    6fb31c1136e51cf5ace2b61e822cb3b4

  • SHA1

    0bfa7880c777763cab3209ac11b7e1421d9487d8

  • SHA256

    ebbfa31fa7a455b69c057459ff2b771c5a8f906507b7d3b991e0f9cd9e03e68d

  • SHA512

    f134742979f0b2b9861e46f8f27380d037b758e6ea42bd38e26f699096ce5fc0c99f16d064f7217d75f5dd373cef87bb874b4dcb7a845c402add9fe6af64aa6d

  • SSDEEP

    3072:oSWWpCnvF6Evu0EW6oFx8BOBWckK8q9feqbkVIvJ+leh:oSWWpCnvF6Evu0TqBOBWG8aeqb6IhMeh

Score
6/10
pdflinkjavascript

Malware Config

Signatures

  • PDF contains JavaScript

    Detects presence of JavaScript in PDF files.

    pdfjavascript
  • PDF contains one or more embedded files

    Detects presence of embedded files in PDF files.

    pdf
  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

    pdflink

Files

  • test.pdf
    .pdf

    • https://www.jotform.com/products/pdf-editor/?utm_source=pdf_file&utm_medium=referral&utm_term=233623780739060&utm_content=jotform_text&utm_campaign=pdf_file_branding_footer

  • 5.pdf
    .pdf
  • has been verified. However PDF, Jpeg, Docx, .xlsx
    .doc .xlsx windows office2003

    Password: VelvetSweatshop

  • decrypted
    .xlsx office2007