General

  • Target

    f93c93ad1b377e8effafc4c88b233eaf221e2ada5b7366dbcabe67f35c700fcd

  • Size

    342KB

  • MD5

    54fc7650a8b5c1c8dc85e84732a6d2c7

  • SHA1

    eed2b590a1b8e60d8cd62a3293dd6bec2623a24a

  • SHA256

    f93c93ad1b377e8effafc4c88b233eaf221e2ada5b7366dbcabe67f35c700fcd

  • SHA512

    a5ced76408949d1c117c21b351ebcbd208ce5c30b01d203a6cc6685d4309ca932bfb0c7a4214db3a4104908a1e5dd096f3586e2564c86aeee7e50e4fd8aac7bf

  • SSDEEP

    6144:/DD9xv8Pn+mxXE1GTZkGFFceqza24Pz7rMYojAczTUcFNri41HtwICzew5nIrtfE:lxK+MXE1SvvqW9MdkcE5+DqnjkSoNA

Score
4/10

Malware Config

Signatures

  • HTTP links in PDF interactive object 1 IoCs

    Detects HTTP links in interactive objects within PDF files.

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • f93c93ad1b377e8effafc4c88b233eaf221e2ada5b7366dbcabe67f35c700fcd
    .pdf
    • https://jtcqatar-my.sharepoint.com/:f:/g/personal/romy_delavina_jtc-qa_com/EnHcou7_1HFIvjYwJtIOcGsBpC50mSv_4T8zXnajb8dO4w?e=HBcv7N

    • https://we.tl/t-t6abQH29OZ

    • https://we.tl/t-AgeGbJd5AJ

    • http://romy.delavina.jtc.qa

    • http://tuta.io