Malicious PDFs Analysis Continued
Monday, January 12. 2009
After my initial posting about the possibility to analyze PDF files with CWSandbox we received a few more such samples. In all cases the PDF file exploits a vulnerability in Acrobat Reader once the file is opened. With the help of CWSandbox it is possible to observe this exploit and also the actions of the malware after the compromise (e.g., downloading of additional malware from another server). Please find below three additional examples of such reports:
If you happen to have more malicious PDFs, please submit them at cwsandbox.org :-)
- https://cwsandbox.org/?page=report&analysisid=879663&password=vqtgp
- https://cwsandbox.org/?page=report&analysisid=878305&password=utxuc
- https://cwsandbox.org/?page=report&analysisid=878393&password=pmviw
If you happen to have more malicious PDFs, please submit them at cwsandbox.org :-)
