Overview

overview

10

Static

static

10

anan.pdf

windows7-x64

10

anan.pdf

windows10-2004-x64

3

template.exe

windows7-x64

10

template.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    anan.pdf

  • Size

    45KB

  • MD5

    b2f7ebdcf70cf2210918c9dfdd45b6cf

  • SHA1

    854f97c670ef309ffe9ae92e40e41652a0c7582b

  • SHA256

    51f415b35bde63c99353aa076d2441f890f190ee3a6190bb486c21dd71ad9cb4

  • SHA512

    db9b4aa7c5a69df630b4c71ac2f857d74edf1545606c41fd56cddb2dce9a261428d9d9481add0d2c79fe633adfdfcb32fb00317b90bac63fde717dd5fc969c0f

  • SSDEEP

    768:cWUaQvmyMvRv5W67aeKvG2NtO+s2NpiCchMkFA5gygUVNLbtTe4dXKS5kBDcR:c3awmfvRU6mNvnNc28APPLTdpwcR

Score
10/10
pdfjavascriptmetasploit

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

10.0.2.15:443

Signatures

  • Metasploit family
    metasploit
  • PDF contains JavaScript

    Detects presence of JavaScript in PDF files.

    pdfjavascript
  • PDF contains one or more embedded files

    Detects presence of embedded files in PDF files.

    pdf
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • anan.pdf
    .pdf
  • template.pdf
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections