Overview

overview

10

Static

static

10

template.pdf

windows7-x64

10

template.pdf

windows10-2004-x64

3

form.exe

windows7-x64

10

form.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    template.pdf

  • Size

    59KB

  • MD5

    56e46d84e4aaece264bc55fbec3c46cb

  • SHA1

    745b2af414a617b0d2dea51c94d8b18238e9a594

  • SHA256

    db1f2983ac379ab887a62de08bd71806cbb22f3f65b84873807c3d1d9c8c8130

  • SHA512

    fd11a0c85fbba610a622bf029a4b2a403f5726ac8b6a5822da088b848b4e0a3211c41cf81bf1c8fe3281d53e11aefe8151075e67d2b2e417c75dae25a99b3def

  • SSDEEP

    768:TLcuNY8Dgm5j8wK+tZtLHn9E943UaLLY6L0KJfn9Mc7f8qF+jpT+rYOY65:TLcUj5gwK+jdH9fcO9J1R81T+N5

Score
10/10
pdfjavascriptmetasploit

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.78.128:443

Signatures

  • Metasploit family
    metasploit
  • PDF contains JavaScript

    Detects presence of JavaScript in PDF files.

    pdfjavascript
  • PDF contains one or more embedded files

    Detects presence of embedded files in PDF files.

    pdf
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • template.pdf
    .pdf
  • form.pdf
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections