Overview

overview

4

Static

static

4

aa1a29e789...92.pdf

windows7_x64

1

aa1a29e789...92.pdf

windows10-2004_x64

4

Sharing

Copy URL
Twitter E-mail

General

  • Target

    aa1a29e789d6dcd5e1f64baee2b80dcd7bb7f3fc32e6cd0f5ef6a99e3abb1392

  • Size

    339KB

  • MD5

    9cf615982d69d25b1d0057617bd72a95

  • SHA1

    8d8e9cf2d6a988a24c568af5102c79399bfbd29b

  • SHA256

    aa1a29e789d6dcd5e1f64baee2b80dcd7bb7f3fc32e6cd0f5ef6a99e3abb1392

  • SHA512

    5c36cb842f8193f655c3f01249f27a23811710dcd9a29cb350ece59c18b8a9fabe24b7024cf37e5527678f6577a395097c8af6db76b5e9b0807429af8855fbf0

  • SSDEEP

    6144:Wg4BX8Pn+mx4+sGTzykGFFceqTa24Pz7rMYg1/B4JT/nBjRqkJVmrtft8kSRuNjc:b4BC+M4+sWOvvq29MvlybjRJPkSoNA

Score
4/10
pdflink

Malware Config

Signatures

  • HTTP links in PDF interactive object 1 IoCs

    Detects HTTP links in interactive objects within PDF files.

    pdflink
  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

    pdflink

Files

  • aa1a29e789d6dcd5e1f64baee2b80dcd7bb7f3fc32e6cd0f5ef6a99e3abb1392
    .pdf

    • https://jtcqatar-my.sharepoint.com/:f:/g/personal/romy_delavina_jtc-qa_com/EnHcou7_1HFIvjYwJtIOcGsBpC50mSv_4T8zXnajb8dO4w?e=HBcv7N

    • https://we.tl/t-kNPtkJkJeu

    • https://we.tl/t-D7nDCJz0HW

    • http://romy.delavina.jtc.qa

    • http://tuta.io