General

  • Target

    infected.zip

  • Size

    299KB

  • MD5

    de2f1aab7096bb189910a7caf60d6e34

  • SHA1

    c6a4571344fb316a4f48008bbc696cc659e591e8

  • SHA256

    dcf29ec53236bf6c9132022460e10ae1affd668814e3ebba89b3c869c20f5cff

  • SHA512

    ec80394fe2018b8336e25e22eaf53575ab8cd79fe2caca7b949317d096caa089d78ab7b97bfece30f1b5680179d7ceeb2dc7e3be5c09e0a730a8609319b5a882

Score
4/10

Malware Config

Signatures

  • HTTP links in PDF interactive object 1 IoCs

    Detects HTTP links in interactive objects within PDF files.

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • infected.zip
    .zip

    Password: infected

  • BUDAPEST_DRAFT_PROGRAM_TO_ALL.01.pdf
    .pdf
  • INV_generalInfo.01.pdf
    .pdf
    • https://www.marriott.com/events/start.mi?id=1625584277795&key=GRP

  • Kover_Laszlo_Letter.pdf
    .pdf
  • Links aus Email.txt