General

  • Target

    4b6c3c975b25a518f3445e4b359b9377f868c6cd9890b318734d7ff795d5db77

  • Size

    332KB

  • MD5

    7fa5028f2394dcea02d4fdf186b3761f

  • SHA1

    4086c3e50b46177f4344518a72f66e29dbd255be

  • SHA256

    4b6c3c975b25a518f3445e4b359b9377f868c6cd9890b318734d7ff795d5db77

  • SHA512

    e65e1b6d3ee2d132e4edf349349a0f5f0b2a79188cf10bc7228e14d0d16c0a26d05f4d1062c1d5b3de09f02d4c2b1a3ae1f88985a3c580b6db90ede0695cf749

  • SSDEEP

    6144:rXvakkHuEse8Pn+mxXmNBivKJeU+cjZt0grEgueARGNoDDgnHtie8Fcupr7zdt:jvJHEW+MXmNBiCV+LTe/NoIn2W2

Score
4/10

Malware Config

Signatures

  • HTTP links in PDF interactive object 1 IoCs

    Detects HTTP links in interactive objects within PDF files.

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • 4b6c3c975b25a518f3445e4b359b9377f868c6cd9890b318734d7ff795d5db77
    .pdf
    • https://we.tl/t-1VyVEAtzAf

    • https://we.tl/t-5wQSJsFUlC

    • https://jtcqatar-my.sharepoint.com/:f:/g/personal/romy_delavina_jtc-qa_com/EnHcou7_1HFIvjYwJtIOcGsBpC50mSv_4T8zXnajb8dO4w?e=HBcv7N

    • https://we.tl/t-1VyVEAtzAfen-GB

    • https://we.tl/t-5wQSJsFUlCen-GB

    • http://romy.delavina.jtc.qa

    • http://protonmail.ch