General

  • Target

    972e2dd4bdcc5a2a09a3afe323cb8e899c3fa10cb1dc5985c9354f51e469e65d

  • Size

    334KB

  • MD5

    d03fb3e473bd95c314987a1b166a92ed

  • SHA1

    22fc303a99613fbd2b2f2af4fbad32d4fdf77f59

  • SHA256

    972e2dd4bdcc5a2a09a3afe323cb8e899c3fa10cb1dc5985c9354f51e469e65d

  • SHA512

    5d50881f788cd01b8147c30a5001aa47001ae0cd43f3ea02a8c43fcd69a7e8ede1109df703bbfce9bda3c3bc5c8c4ed32d4bcf188dd9eb64bafc4bcf88fe5203

  • SSDEEP

    6144:7+Kx8kHuEsP8Pn+mxpXHlivK7eU+cjZt05B+mmty2454YGrnCPwxQcyupr7zdt:yKyHE1+MpXFiCb+L5B0v4m/GPc

Score
4/10

Malware Config

Signatures

  • HTTP links in PDF interactive object 1 IoCs

    Detects HTTP links in interactive objects within PDF files.

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • 972e2dd4bdcc5a2a09a3afe323cb8e899c3fa10cb1dc5985c9354f51e469e65d
    .pdf
    • https://we.tl/t-2a9aq4LJSn

    • https://we.tl/t-egfvdBvESW

    • https://jtcqatar-my.sharepoint.com/:f:/g/personal/romy_delavina_jtc-qa_com/EnHcou7_1HFIvjYwJtIOcGsBpC50mSv_4T8zXnajb8dO4w?e=HBcv7N

    • https://we.tl/t-2a9aq4LJSnen-GB

    • https://we.tl/t-egfvdBvESWen-GB

    • http://romy.delavina.jtc.qa

    • http://protonmail.ch