ffa5c396a37ef0dbabf541cecc4e1bda84675eace39d2a8d2ccf355f08a9ca80[.]bin

General

Target
ffa5c396a37ef0dbabf541cecc4e1bda84675eace39d2a8d2ccf355f08a9ca80.bin
Size 16.1MB
Sample260727-2plemsfk5s
SHA256 ffa5c396a37ef0dbabf541cecc4e1bda84675eace39d2a8d2ccf355f08a9ca80
MD5 05d81eb0e76fe59df6c6fe6088e85eab
SHA1 b8421d746f47c9c61e3aa98102b484b9b60f7bad
SHA512 538af10a7fb92f94e96fc2f8b3da3aac80a034733b7bd9bb4c50bb22c36cb9cbdbaa4c3f5618372dd3edfcc4be8ed13baf445faf1d5e18244729cfd5a6015bf7
SSDEEP 196608:N4qfRgeCageCggeCdgeCEgeCSgeCOgeC6geCcgeCHgeCm:/fVVT2HRJ5zwp
TLSH
T1BF07336BA07869C026E1A1DF58E29F3153712C4BC8C7A48B4CEFF7DDB60B38515A9D48
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Detects RAR archive exploited with CVE-2025-8088 ADS path traversal. 1 IoCs

resource	yara_rule
sample	CVE_2025_8088

One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
pdf link

ffa5c396a37ef0dbabf541cecc4e1bda84675eace39d2a8d2ccf355f08a9ca80.bin

.rar 16.1MB
mike_oxmaul_cv.pdf

.pdf 37KB

SHA256 ffa5c396a37ef0dbabf541cecc4e1bda84675eace39d2a8d2ccf355f08a9ca80
MD5 05d81eb0e76fe59df6c6fe6088e85eab
SHA1 b8421d746f47c9c61e3aa98102b484b9b60f7bad
SHA512 538af10a7fb92f94e96fc2f8b3da3aac80a034733b7bd9bb4c50bb22c36cb9cbdbaa4c3f5618372dd3edfcc4be8ed13baf445faf1d5e18244729cfd5a6015bf7
SSDEEP 196608:N4qfRgeCageCggeCdgeCEgeCSgeCOgeC6geCcgeCHgeCm:/fVVT2HRJ5zwp
TLSH
T1BF07336BA07869C026E1A1DF58E29F3153712C4BC8C7A48B4CEFF7DDB60B38515A9D48
MD5 SHA1 SHA512 SSDEEP TLSH

Detects RAR archive exploited with CVE-2025-8088 ADS path traversal.

exploit apt romcom storm_0978 cve_2025_8088