PDF Document file analysis – b868a33824b3

The file 10 Black Hat Python Python Programming for Hackers and Pentesters.pdf is a PDF Document for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 400 embedded or derived files and a malware configuration (URLs in PDF). It matches 3 YARA rules. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256: —
MD5: -
Verdict: Inconclusive
File type: PDF Document

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

PDF Document

401 files

PDF10 Black Hat Python Python Programming for Hackers and Pentesters.pdf

BINText (Preview)

BIN#Stream {493}

BIN#Stream {5}

BIN#Stream {17}

BIN#Stream {589}

BIN#Stream {591}

BIN#Stream {592}

BIN#Stream {594}

BIN#Stream {24}

BIN#Stream {595}

BIN#Stream {597}

BIN#Stream {28}

BIN#Stream {32}

BIN#Stream {36}

BIN#Stream {84}

BIN#Stream {40}

BIN#Stream {44}

BIN#Stream {60}

BIN#Stream {598}

BIN#Stream {600}

BIN#Stream {601}

BIN#Stream {603}

BIN#Stream {604}

BIN#Stream {606}

BIN#Stream {76}

BIN#Stream {79}

BIN#Stream {73}

BIN#Stream {70}

BIN#Stream {67}

BIN#Stream {64}

BIN#Stream {82}

BIN#Stream {48}

BIN#Stream {62}

BIN#Stream {120}

BIN#Stream {136}

BIN#Stream {86}

BIN#Stream {88}

BIN#Stream {90}

BIN#Stream {92}

BIN#Stream {94}

BIN#Stream {96}

BIN#Stream {98}

BIN#Stream {100}

BIN#Stream {102}

BIN#Stream {104}

BIN#Stream {106}

BIN#Stream {108}

BIN#Stream {110}

BIN#Stream {112}

BIN#Stream {114}

BIN#Stream {116}

BIN#Stream {118}

BIN#Stream {122}

BIN#Stream {125}

BIN#Stream {131}

BIN#Stream {128}

BIN#Stream {133}

BIN#Stream {140}

BIN#Stream {142}

BIN#Stream {167}

BIN#Stream {144}

BIN#Stream {146}

BIN#Stream {149}

BIN#Stream {151}

BIN#Stream {153}

BIN#Stream {155}

BIN#Stream {161}

BIN#Stream {607}

BIN#Stream {609}

BIN#Stream {163}

BIN#Stream {165}

BIN#Stream {187}

BIN#Stream {193}

BIN#Stream {171}

BIN#Stream {173}

BIN#Stream {175}

BIN#Stream {177}

BIN#Stream {179}

BIN#Stream {181}

BIN#Stream {183}

BIN#Stream {185}

BIN#Stream {189}

BIN#Stream {191}

BIN#Stream {197}

BIN#Stream {199}

BIN#Stream {201}

BIN#Stream {203}

BIN#Stream {205}

BIN#Stream {223}

BIN#Stream {207}

BIN#Stream {209}

BIN#Stream {211}

BIN#Stream {213}

BIN#Stream {215}

BIN#Stream {217}

BIN#Stream {219}

BIN#Stream {221}

BIN#Stream {227}

BIN#Stream {233}

BIN#Stream {230}

BIN#Stream {235}

BIN#Stream {237}

BIN#Stream {239}

BIN#Stream {241}

BIN#Stream {243}

BIN#Stream {256}

BIN#Stream {252}

BIN#Stream {249}

BIN#Stream {246}

BIN#Stream {259}

BIN#Stream {289}

BIN#Stream {261}

BIN#Stream {263}

BIN#Stream {265}

BIN#Stream {274}

BIN#Stream {271}

BIN#Stream {268}

BIN#Stream {276}

BIN#Stream {278}

BIN#Stream {280}

BIN#Stream {286}

BIN#Stream {283}

BIN#Stream {293}

BIN#Stream {301}

BIN#Stream {305}

BIN#Stream {309}

BIN#Stream {295}

BIN#Stream {297}

BIN#Stream {299}

BIN#Stream {303}

BIN#Stream {307}

BIN#Stream {313}

BIN#Stream {370}

BIN#Stream {321}

BIN#Stream {327}

BIN#Stream {335}

BIN#Stream {315}

BIN#Stream {317}

BIN#Stream {319}

BIN#Stream {323}

BIN#Stream {325}

BIN#Stream {329}

BIN#Stream {331}

BIN#Stream {333}

BIN#Stream {339}

BIN#Stream {341}

BIN#Stream {343}

BIN#Stream {345}

BIN#Stream {347}

BIN#Stream {349}

BIN#Stream {364}

BIN#Stream {351}

BIN#Stream {353}

BIN#Stream {355}

BIN#Stream {357}

BIN#Stream {359}

BIN#Stream {362}

BIN#Stream {368}

BIN#Stream {372}

BIN#Stream {376}

BIN#Stream {380}

BIN#Stream {392}

BIN#Stream {396}

BIN#Stream {374}

BIN#Stream {378}

BIN#Stream {382}

BIN#Stream {384}

BIN#Stream {386}

BIN#Stream {388}

BIN#Stream {390}

BIN#Stream {394}

BIN#Stream {400}

BIN#Stream {402}

BIN#Stream {404}

BIN#Stream {406}

BIN#Stream {408}

BIN#Stream {410}

BIN#Stream {414}

BIN#Stream {420}

BIN#Stream {412}

BIN#Stream {416}

BIN#Stream {418}

BIN#Stream {441}

BIN#Stream {443}

BIN#Stream {445}

BIN#Stream {447}

BIN#Stream {449}

BIN#Stream {451}

BIN#Stream {453}

BIN#Stream {455}

BIN#Stream {457}

BIN#Stream {459}

BIN#Stream {461}

BIN#Stream {463}

BIN#Stream {465}

BIN#Stream {467}

BIN#Stream {469}

BIN#Stream {471}

BIN#Stream {473}

BIN#Stream {475}

BIN#Stream {477}

BIN#Stream {479}

BIN#Stream {481}

BIN#Stream {483}

BIN#Stream {485}

BIN#Stream {487}

BIN#Stream {489}

BIN#Stream {491}

TXTStructure

Config. Field	Value
URL #1	http:/huhuhuhuhuhuhuhuhuhuhu
URL #2	http:/huhuhuhuhuhuhuhuhuhuhu
URL #3	http:/huhuhuhuhuhuhu
URL #4	http:/huhuhuhuhuhuhu
URL #5	http:/huhuhuhuhuhuhuhuhuhuhu
URL #6	https:huhuhuhuhuhuhuhuhuhuhu
URL #7	http:/huhuhuhuhuhuhuhuhuhuhu
URL #8	http:/huhuhuhuhuhuhuhuhuhuhu
URL #9	http:/huhuhuhuhuhuhu
URL #10	http:/huhuhuhuhuhuhuhuhuhuhu
URL #11	http:/huhuhuhuhuhuhu
URL #12	http:/huhuhuhuhuhuhu
URL #13	http:/huhuhuhuhuhuhuhuhuhuhu
URL #14	http:/huhuhuhuhuhuhuhuhuhuhu
URL #15	http:/huhuhuhuhuhuhu
URL #16	http:/huhuhuhuhuhuhuhuhuhuhu
URL #17	http:/huhuhuhuhuhuhuhuhuhuhu
URL #18	http:/huhuhuhuhuhuhuhuhuhuhu
URL #19	http:/huhuhuhuhuhuhuhuhuhuhu
URL #20	http:/huhuhuhuhuhuhuhuhuhuhu
URL #21	http:/huhuhuhuhuhuhuhuhuhuhu
URL #22	http:/huhuhuhuhuhuhu
URL #23	http:/huhuhuhuhuhuhu
URL #24	http:/huhuhuhuhuhuhuhuhuhuhu
URL #25	http:/huhuhuhuhuhuhu
URL #26	http:/huhuhuhuhuhuhuhuhuhuhu
URL #27	http:/huhuhuhuhuhuhuhuhuhuhu
URL #28	http:/huhuhuhuhuhuhuhuhuhuhu
URL #29	http:/huhuhuhuhuhuhuhuhuhuhu
URL #30	http:/huhuhuhuhuhuhuhuhuhuhu
URL #31	http:/huhuhuhuhuhuhuhuhuhuhu
URL #32	http:/huhuhuhuhuhuhuhuhuhuhu
URL #33	http:/huhuhuhuhuhuhuhuhuhuhu
URL #34	http:/huhuhuhuhuhuhuhuhuhuhu
URL #35	http:/huhuhuhuhuhuhuhuhuhuhu
URL #36	https:huhuhuhuhuhuhuhuhuhuhu
URL #37	https:huhuhuhuhuhuhuhuhuhuhu
URL #38	http:/huhuhuhuhuhuhuhuhuhuhu
URL #39	http:/huhuhuhuhuhuhuhuhuhuhu
URL #40	http:/huhuhuhuhuhuhuhuhuhuhu
URL #41	http:/huhuhuhuhuhuhuhuhuhuhu
URL #42	http:/huhuhuhuhuhuhuhuhuhuhu
URL #43	https:huhuhuhuhuhuhuhuhuhuhu
URL #44	http:/huhuhuhuhuhuhuhuhuhuhu
URL #45	http:/huhuhuhuhuhuhuhuhuhuhu
URL #46	http:/huhuhuhuhuhuhuhuhuhuhu
URL #47	https:huhuhuhuhuhuhu
URL #48	https:huhuhuhuhuhuhuhuhuhuhu
URL #49	https:huhuhuhuhuhuhuhuhuhuhu
URL #50	http:/huhuhuhuhuhuhu
URL #51	http:/huhuhuhuhuhuhuhuhuhuhu
URL #52	http:/huhuhuhuhuhuhuhuhuhuhu
URL #53	http:/huhuhuhuhuhuhuhuhuhuhu
URL #54	http:/huhuhuhuhuhuhuhuhuhuhu
URL #55	http:/huhuhuhuhuhuhuhuhuhuhu
URL #56	http:/huhuhuhuhuhuhu
URL #57	https:huhuhuhuhuhuhuhuhuhuhu
URL #58	http:/huhuhuhuhuhuhuhuhuhuhu
URL #59	https:huhuhuhuhuhuhuhuhuhuhu
URL #60	http:/huhuhuhuhuhuhuhuhuhuhu
URL #61	http:/huhuhuhuhuhuhuhuhuhuhu
URL #62	http:/huhuhuhuhuhuhuhuhuhuhu
URL #63	http:/huhuhuhuhuhuhuhuhuhuhu
URL #64	http:/huhuhuhuhuhuhuhuhuhuhu
URL #65	http:/huhuhuhuhuhuhuhuhuhuhu
URL #66	http:/huhuhuhuhuhuhuhuhuhuhu
URL #67	http:/huhuhuhuhuhuhuhuhuhuhu
URL #68	http:/huhuhuhuhuhuhuhuhuhuhu
URL #69	http:/huhuhuhuhuhuhuhuhuhuhu
URL #70	https:huhuhuhuhuhuhuhuhuhuhu
URL #71	http:/huhuhuhuhuhuhuhuhuhuhu
URL #72	https:huhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Name	Value
10 Black Hat Python Python Programming for Hackers and Pentesters.pdf	1.4
10 Black Hat Python Python Programming for Hackers and Pentesters.pdf	1.4
10 Black Hat Python Python Programming for Hackers and Pentesters.pdf	Justin Seitz
10 Black Hat Python Python Programming for Hackers and Pentesters.pdf	Justin Seitz
10 Black Hat Python Python Programming for Hackers and Pentesters.pdf	Python, Hacking, Security, Programming, Pentesting
10 Black Hat Python Python Programming for Hackers and Pentesters.pdf	Python, Hacking, Security, Programming, Pentesting
10 Black Hat Python Python Programming for Hackers and Pentesters.pdf	D:20141209024746Z
10 Black Hat Python Python Programming for Hackers and Pentesters.pdf	D:20141209024746Z
10 Black Hat Python Python Programming for Hackers and Pentesters.pdf	Python Programming for Hackers and Pentesters
10 Black Hat Python Python Programming for Hackers and Pentesters.pdf	Python Programming for Hackers and Pentesters
10 Black Hat Python Python Programming for Hackers and Pentesters.pdf	Black Hat Python
10 Black Hat Python Python Programming for Hackers and Pentesters.pdf	Black Hat Python
10 Black Hat Python Python Programming for Hackers and Pentesters.pdf	D:20141209024746Z
10 Black Hat Python Python Programming for Hackers and Pentesters.pdf	D:20141209024746Z
10 Black Hat Python Python Programming for Hackers and Pentesters.pdf	Black Hat Python
10 Black Hat Python Python Programming for Hackers and Pentesters.pdf	Black Hat Python
10 Black Hat Python Python Programming for Hackers and Pentesters.pdf	Justin Seitz
10 Black Hat Python Python Programming for Hackers and Pentesters.pdf	Justin Seitz
10 Black Hat Python Python Programming for Hackers and Pentesters.pdf	Python Programming for Hackers and Pentesters
10 Black Hat Python Python Programming for Hackers and Pentesters.pdf	Python Programming for Hackers and Pentesters
10 Black Hat Python Python Programming for Hackers and Pentesters.pdf	Python, Hacking, Security, Programming, Pentesting
10 Black Hat Python Python Programming for Hackers and Pentesters.pdf	Python, Hacking, Security, Programming, Pentesting

URI URI

http:/huhuhuhuhuhuhu

URI URI

http:/huhuhuhuhuhuhu

URI URI

http:/huhuhuhuhuhuhuhuhuhuhu

URI URI

http:/huhuhuhuhuhuhu

URI URI

http:/huhuhuhuhuhuhuhuhuhuhu

URI URI

http:/huhuhuhuhuhuhu

URI URI

https:huhuhuhuhuhuhuhuhuhuhu

URI URI

http:/huhuhuhuhuhuhu

URI URI

http:/huhuhuhuhuhuhuhuhuhuhu

URI URI

http:/huhuhuhuhuhuhuhuhuhuhu

URI URI

http:/huhuhuhuhuhuhu

URI URI

http:/huhuhuhuhuhuhu

URI URI

http:/huhuhuhuhuhuhuhuhuhuhu

URI URI

http:/huhuhuhuhuhuhuhuhuhuhu

URI URI

http:/huhuhuhuhuhuhu

URI URI

http:/huhuhuhuhuhuhuhuhuhuhu

URI URI

http:/huhuhuhuhuhuhu

URI URI

http:/huhuhuhuhuhuhuhuhuhuhu

URI URI

http:/huhuhuhuhuhuhuhuhuhuhu

URI URI

https:huhuhuhuhuhuhuhuhuhuhu

URI URI

https:huhuhuhuhuhuhuhuhuhuhu

URI URI

http:/huhuhuhuhuhuhuhuhuhuhu

URI URI

http:/huhuhuhuhuhuhuhuhuhuhu

URI URI

http:/huhuhuhuhuhuhuhuhuhuhu

URI URI

http:/huhuhuhuhuhuhuhuhuhuhu

URI URI

http:/huhuhuhuhuhuhuhuhuhuhu

URI URI

http:/huhuhuhuhuhuhuhuhuhuhu

URI URI

http:/huhuhuhuhuhuhuhuhuhuhu

URI URI

https:huhuhuhuhuhuhuhuhuhuhu

URI URI

http:/huhuhuhuhuhuhu

URI URI

http:/huhuhuhuhuhuhuhuhuhuhu

URI URI

http:/huhuhuhuhuhuhuhuhuhuhu

URI URI

http:/huhuhuhuhuhuhuhuhuhuhu

URI URI

http:/huhuhuhuhuhuhuhuhuhuhu

URI URI

http:/huhuhuhuhuhuhuhuhuhuhu

URI URI

http:/huhuhuhuhuhuhuhuhuhuhu

URI URI

http:/huhuhuhuhuhuhuhuhuhuhu

URI URI

http:/huhuhuhuhuhuhuhuhuhuhu

URI URI

http:/huhuhuhuhuhuhuhuhuhuhu

URI URI

http:/huhuhuhuhuhuhuhuhuhuhu

URI URI

http:/huhuhuhuhuhuhuhuhuhuhu

URI URI

http:/huhuhuhuhuhuhuhuhuhuhu

URI URI

http:/huhuhuhuhuhuhuhuhuhuhu

URI URI

https:huhuhuhuhuhuhuhuhuhuhu

URI URI

http:/huhuhuhuhuhuhuhuhuhuhu

URI URI

https:huhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential

Overview

Summary by MalvaGPT

Characteristics

File Structure

Malware Configuration — URLs in PDF72

Information22

Artefacts46

File Structure

Malware Configuration — URLs in PDF72

Artefacts46