General
-
Target
c639c49c1fa2c581f4ebd065591f6800f9c0178ad8235768be9fe640d346d471.pdf
-
Size
58KB
-
Sample
240907-pd344atelj
-
MD5
3adde4fdff788093d385f22601c4488e
-
SHA1
2ec40ed80fc962ce51c7b3fbe2f9360ba806424f
-
SHA256
c639c49c1fa2c581f4ebd065591f6800f9c0178ad8235768be9fe640d346d471
-
SHA512
eeee1c886f4a366523284e47670dc179e95a1eaaed3738fd6e4f614beff178939abbeae04873906b2cb7fb57c48cd378880391dfe30f7893011464c80ee9dbae
-
SSDEEP
768:TLcuNY8Dgm5XgDzsW1D4DBei8bWcYYy1ZrgtDhDUs1Nt615YNl3HkhNFksBy8DuT:TLcUj5w0W1Dz1biLsSsN8ANuFdtd6
Behavioral task
behavioral1
Sample
c639c49c1fa2c581f4ebd065591f6800f9c0178ad8235768be9fe640d346d471.pdf
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
c639c49c1fa2c581f4ebd065591f6800f9c0178ad8235768be9fe640d346d471.pdf
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
form.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
form.exe
Resource
win10v2004-20240802-en
Malware Config
Extracted
metasploit
windows/reverse_tcp
10.0.2.15:443
Targets
-
-
Target
c639c49c1fa2c581f4ebd065591f6800f9c0178ad8235768be9fe640d346d471.pdf
-
Size
58KB
-
MD5
3adde4fdff788093d385f22601c4488e
-
SHA1
2ec40ed80fc962ce51c7b3fbe2f9360ba806424f
-
SHA256
c639c49c1fa2c581f4ebd065591f6800f9c0178ad8235768be9fe640d346d471
-
SHA512
eeee1c886f4a366523284e47670dc179e95a1eaaed3738fd6e4f614beff178939abbeae04873906b2cb7fb57c48cd378880391dfe30f7893011464c80ee9dbae
-
SSDEEP
768:TLcuNY8Dgm5XgDzsW1D4DBei8bWcYYy1ZrgtDhDUs1Nt615YNl3HkhNFksBy8DuT:TLcUj5w0W1Dz1biLsSsN8ANuFdtd6
Score10/10-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Executes dropped EXE
-
Loads dropped DLL
-
-
-
Target
form.pdf
-
Size
72KB
-
MD5
081fc5f9ef8ccf9b362b48bc4d66a269
-
SHA1
aa5bd818fb2a5c9d3591658439524f40cd2cc706
-
SHA256
48c6949a16fef947addfb644d1345224e6e4cacc4ebef750be0f3f85f8bda733
-
SHA512
80bdf5e06c8443c72ec7fe9893f490869cbe67afc95aabe48300a8a4282999048a5f691936d194ff22e9e27f79778d04cddb4332f275659cfaa17a972fc2be96
-
SSDEEP
1536:IfRBtXw/veTxpxjBrxVXdR3t7IDB5Mb+KR0Nc8QsJq39:6avehNrtR3t45e0Nc8QsC9
Score10/10-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-