General

  • Target

    40d6a2ed721d31a19e3638aa11170c652774d90ce822d04efb64dfac1a0d0102

  • Size

    251KB

  • MD5

    694a6568b7572125305bdb4b24cebe98

  • SHA1

    93dbfd4d27256c596d2426bb35e63b7188033e6c

  • SHA256

    40d6a2ed721d31a19e3638aa11170c652774d90ce822d04efb64dfac1a0d0102

  • SHA512

    995d141f4d71dc96d14dd28174a1b2602e77b873908de58ccd57c11ef226dd878411a5b7d9aa915f08e3101dfeef533b0c2bbb982f8b59a4e00cbcda5a210090

  • SSDEEP

    6144:GXabkHuEsW8Pn+mxK6C7kGFFceqEvh8lYA6BkqcuqI0vlKrlUF:GXabHE6+MK6YvvqEvh8WBBuI0vlKrli

Score
4/10

Malware Config

Signatures

  • HTTP links in PDF interactive object 1 IoCs

    Detects HTTP links in interactive objects within PDF files.

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • 40d6a2ed721d31a19e3638aa11170c652774d90ce822d04efb64dfac1a0d0102
    .pdf
    • https://jtcqatar-my.sharepoint.com/:f:/g/personal/romy_delavina_jtc-qa_com/EnHcou7_1HFIvjYwJtIOcGsBpC50mSv_4T8zXnajb8dO4w?e=HBcv7N

    • https://we.tl/t-Wl8JCqc9pO

    • https://we.tl/t-XDdg84KpVI

    • http://romy.delavina.jtc.qa

    • http://tuta.io