General

  • Target

    d20be0245f988e5e04645ec6aee35ceec574128ba7c24c8311ed012b0f6727a7

  • Size

    251KB

  • MD5

    d51d5e4c193617fa676154d1fe1d4802

  • SHA1

    d827b82dee48c353ac7ca1bf59161c33fc0308e7

  • SHA256

    d20be0245f988e5e04645ec6aee35ceec574128ba7c24c8311ed012b0f6727a7

  • SHA512

    4f520150b6fca21d51b840bf0ca361c34ac5dcad8ebe203841773fc96ab9afe351ab22a4a1da24010e27dc5d8b037968373d3be7199d9d94f59e4ab6f185e792

  • SSDEEP

    6144:8kHuEsW8Pn+mxK6C7kGFFceqEvh8lYA6BkqcuqI0vlKrlUl:8HE6+MK6YvvqEvh8WBBuI0vlKrlc

Score
4/10

Malware Config

Signatures

  • HTTP links in PDF interactive object 1 IoCs

    Detects HTTP links in interactive objects within PDF files.

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • d20be0245f988e5e04645ec6aee35ceec574128ba7c24c8311ed012b0f6727a7
    .pdf
    • https://jtcqatar-my.sharepoint.com/:f:/g/personal/romy_delavina_jtc-qa_com/EnHcou7_1HFIvjYwJtIOcGsBpC50mSv_4T8zXnajb8dO4w?e=HBcv7N

    • https://we.tl/t-RRCpuA27vp

    • https://we.tl/t-QgRrofD8y9

    • http://romy.delavina.jtc.qa

    • http://tuta.io