red_spider_v721732[.]zip

Sharing

Target

red_spider_v721732.zip
Size

18.7MB
MD5

abbe2c80e58b0a062e8e258888c525e6
SHA1

4d15540b9f967292f5e9f672c491515041066719
SHA256

dd2cbeda09bb4e9bdc32df15f5ed8cf090eb7c6aea30f67c471ec777b13d871d
SHA512

af75a0e9abe1a88e2f1124200d6ba20c71af66f246afd9994a4b6a33beb3a61428d76914513319dbf9ee9e17927a0cbf6342aa0acfed581a41c2c3c4a02361fe

Score

8^/10

pdf link macro xlm

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

Processes:

resource	yara_rule
static1/unpack001/???????????????????????????????????.doc	office_xlm_macros

HTTP links in PDF interactive object 1 IoCs

Detects HTTP links in interactive objects within PDF files.

Processes:

resource	yara_rule
static1/unpack001/???????????????(FormatPaper.exe)??????.pdf	pdf_with_link_action

One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
pdf link