Skip navigation.
Home
Offensive Computing
Home » forums » General » Sample Requests

Newest PDF Exploit CVE-2009-4324

Submitted by jsp1999 on Tue, 2009-12-15 06:48. |

Hi,

does anybody have the pdf-exploit that is involved in this malware?
http://foruminspace.com/documents/dprk/ab.exe

Thanks

‹ Hard to detect malware Looking for newish coreflo / corefloo / coreflood samples ›
» login or register to post comments

See at the bottom of this

Submitted by rich20b on Tue, 2009-12-15 09:48.

See at the bottom of this page:

http://contagiodump.blogspot.com/2009/12/virustotal-httpwww.html

Email Mila for the password.

» login or register to post comments

RE:

Submitted by ragm on Tue, 2009-12-15 12:58.

This is Posted in http://extraexploit.blogspot.com/:

The malicious PDF is spreaded via email attachments. The following URLs it seemrelated to this issue (used by Trojan.Pidief.h as dropper. Low AV detection rate at the firs Virustotal submission.):
hzzzzzp://foruminspace.com/documents/dprk/ab.exe (replace hzzzzzp with http at your risk)

» login or register to post comments

cve-2009-4324

Submitted by extraexploit on Sat, 2009-12-19 14:57.

Hi there,

I have try to analyze once of the cve-2009-4324 pdf related (in this case "merry chrismas" from contagiodump respository).
If you are interested check http://extraexploit.blogspot.com

Thank you for your attention

Regards

» login or register to post comments