Overview

overview

10

Static

static

10

secret_document.pdf

windows10-2004-x64

10

form.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    secret_document.pdf

  • Size

    59KB

  • MD5

    c7d7404b72be8e794ea1e8a62cc3bc71

  • SHA1

    55fef5d84eec989f6fe58216e27af0d951786c88

  • SHA256

    77766570430fbeb77fb27bc5b4129ccf324bb01687a4090691302882aa9d4273

  • SHA512

    a50a3f3e0d0dda1d0620b87bacde003e788f75e586b2b83dab25c84c950a10c34dd35edf9871ede76541d3ff308dc2e0e571a85c63e9194a273fe4b6a3294c4f

  • SSDEEP

    1536:TLcUj5R5FXZiLS6lh+NctTPpoRsG7evq1ROhDSJyk:TQUFRzXwLPlOctT+JfEMEk

Score
10/10
pdfjavascriptmetasploit

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

172.24.5.216:4000

Signatures

  • Metasploit family
    metasploit
  • PDF contains JavaScript

    Detects presence of JavaScript in PDF files.

    pdfjavascript
  • PDF contains one or more embedded files

    Detects presence of embedded files in PDF files.

    pdf
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • secret_document.pdf
    .pdf
  • form.pdf
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections