Playing Hide and Seek with PDF Files
Tags
attack-pattern: | Data Javascript - T1059.007 Python - T1059.006 Server - T1583.004 Server - T1584.004 Tool - T1588.002 Connection Proxy - T1090 |
Common Information
Type | Value |
---|---|
UUID | 12df6d8b-d1cf-4703-8482-c54c5e482c02 |
Fingerprint | 3e4211594ba73c9d |
Analysis status | DONE |
Considered CTI value | 0 |
Text language | |
Published | April 23, 2023, 6:24 a.m. |
Added to db | April 23, 2023, 8:47 a.m. |
Last updated | Dec. 25, 2024, 6:33 a.m. |
Headline | Playing Hide and Seek with PDF Files |
Title | Playing Hide and Seek with PDF Files |
Detected Hints/Tags/Attributes | 29/1/10 |
Source URLs
URL Provider
RSS Feed
Details | Id | Enabled | Feed title | Url | Added to db |
---|---|---|---|---|---|
Details | 136 | ✔ | InfoSec Write-ups - Medium | https://infosecwriteups.com/feed | 2024-08-30 22:08 |
Attributes
Details | Type | #Events | CTI | Value |
---|---|---|---|---|
Details | Domain | 75 | redacted.com |
|
Details | Domain | 4 | doc.save |
|
Details | Domain | 1 | dnl-trpp.github.io |
|
Details | File | 1 | exportpdf.aspx |
|
Details | File | 1 | divelementtoexport.html |
|
Details | File | 6 | sample.pdf |
|
Details | IPv4 | 24 | 192.168.0.100 |
|
Details | IPv4 | 1582 | 127.0.0.1 |
|
Details | Url | 1 | http://192.168.0.100/test |
|
Details | Url | 1 | https://dnl-trpp.github.io |