Overview

overview

10

Static

static

10

717d1bd6c3...1N.pdf

windows7-x64

10

717d1bd6c3...1N.pdf

windows10-2004-x64

3

form.exe

windows7-x64

10

form.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    717d1bd6c39e77d5df1880a965a559adbb0245e5e6ef114e5996e8569eb641a1N

  • Size

    58KB

  • MD5

    467bf335e2fb2df502d459987cb0ac80

  • SHA1

    7f4ab40bef824ef104e37b22e875a82db0913c94

  • SHA256

    717d1bd6c39e77d5df1880a965a559adbb0245e5e6ef114e5996e8569eb641a1

  • SHA512

    f6985da9e003f48abd342b4b943a8b6b3ab56bc91d75f323cfa3df34f365456faa73ef9c072468795f2b2e8a2307ebf7e4199323f2a7d5ec8c417391b55718aa

  • SSDEEP

    1536:TLcUj55OPHjvXoKeScFB0wTZ7/pcZzyDI:TQUF5CDwKeScFBpZaZzyDI

Score
10/10
pdfjavascriptmetasploit

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.0.172:4545

Signatures

  • Metasploit family
    metasploit
  • PDF contains JavaScript

    Detects presence of JavaScript in PDF files.

    pdfjavascript
  • PDF contains one or more embedded files

    Detects presence of embedded files in PDF files.

    pdf
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 717d1bd6c39e77d5df1880a965a559adbb0245e5e6ef114e5996e8569eb641a1N
    .pdf
  • form.pdf
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections