General

  • Target

    00f4d940fb48f0c752dcd66dbd7df8552951a0feb2ebda0aa6ea738c7edb859e

  • Size

    252KB

  • MD5

    2260d015eacdc14e26be93fbc33c92aa

  • SHA1

    d857861a9c663195721188cddd952e6e6a61f567

  • SHA256

    00f4d940fb48f0c752dcd66dbd7df8552951a0feb2ebda0aa6ea738c7edb859e

  • SHA512

    501f3b5f672e9dc15cc0bfa39de5e68edc3a8080c5c6356e4d34a6b83442b7386fd82c1dce56f22f55bdd0fac0b789e6cadfe7ca02edc677cf4d5f78910a71b7

  • SSDEEP

    6144:u+TdEkHuEsz8Pn+mx2b3kGFFceqrvhYKthq1KWNSVInb:u+KHEl+M2b1vvqrvhna30Inb

Score
4/10

Malware Config

Signatures

  • HTTP links in PDF interactive object 1 IoCs

    Detects HTTP links in interactive objects within PDF files.

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • 00f4d940fb48f0c752dcd66dbd7df8552951a0feb2ebda0aa6ea738c7edb859e
    .pdf
    • https://jtcqatar-my.sharepoint.com/:f:/g/personal/romy_delavina_jtc-qa_com/EnHcou7_1HFIvjYwJtIOcGsBpC50mSv_4T8zXnajb8dO4w?e=HBcv7N

    • https://we.tl/t-DWfAEORBle

    • https://we.tl/t-AWsz7L09mH

    • http://romy.delavina.jtc.qa

    • http://tuta.io