ioc_parser icon indicating copy to clipboard operation
ioc_parser copied to clipboard

PDF Parse Error on ProofPoint APT report

Open threatlead opened this issue 8 years ago • 0 comments

File - https://www.proofpoint.com/sites/default/files/proofpoint-operation-transparent-tribe-threat-insight-en.pdf

  • Testing with pypdf2

    python iocp.py -i pdf -o csv -d -l pypdf2 proofpoint-operation-transparent-tribe-threat-insight-en.pdf

    proofpoint-operation-transparent-tribe-threat-insight-en.pdf 0 error File has not been decrypted

  • Testing with pdfminer

    python iocp.py -i pdf -o csv -d -l pdfminer proofpoint-operation-transparent-tribe-threat-insight-en.pdf

    proofpoint-operation-transparent-tribe-threat-insight-en.pdf 0 error Unknown algorithm: param={'CF': {'StdCF': {'Length': 16, 'CFM': /AESV2, 'AuthEvent': /DocOpen}}, 'O': '\xe6\x03Y[\x93B5&\x88q+\xfb\xb3\xc4\x13=\x1ax\x8b4\xa0\x1b\x0c5-8J\xe9\xed\xb3\x13a', 'Filter': /Standard, 'P': -1340, 'Length': 128, 'R': 4, 'U': '\xa7\xa3\xca\xacj\xb6b8\x98l\x16\x07\xcfQ\xea\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 'V': 4, 'StmF': /StdCF, 'StrF': /StdCF}

threatlead avatar Mar 08 '16 19:03 threatlead