General

  • Target

    48f7705f-c558-4e46-8bb7-074c834bd96e.zip

  • Size

    59KB

  • MD5

    b032174d1ed29a0fc1098e30a758bb73

  • SHA1

    e8b5f2cda1daf29d30e9a19510cf18d62b7d1fdc

  • SHA256

    204d28a5eb5636156053d50d3173a042728de0bb57c267f8e5058cd73e409abf

  • SHA512

    27b13c55c6a44373c2d09ff9adac1b6432eb9a554709d85f0488a8808b61760d620ad93767760dc23384a7dc0499112a1fbab2ceaa3d36a73937e2e0d43a58b2

  • SSDEEP

    1536:SyGlVtUiLxdH4ds8NtKVbl9XgCjS9xTpTo6/Pz3:SyG7tddH4GSYVblSZTDz

Score
3/10

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • 48f7705f-c558-4e46-8bb7-074c834bd96e.zip
    .zip

    Password: infected

  • ProgramData/McAfee/QuarMeta/48f7705f-c558-4e46-8bb7-074c834bd96e
    .xml
  • Users/amcdonald/AppData/Local/Microsoft/Edge/User Data/Default/Cache/Cache_Data/f_00022a
    .pdf
    • https://trafffi.ru/wb?keyword=business%20income%20worksheet%20acord

    • https://uploads.strikinglycdn.com/files/be04600a-ed4a-47f9-9094-8b79204940f9/monument_valley_game_free_download.pdf

    • https://fidegobopoj.weebly.com/uploads/1/3/2/8/132815019/554028.pdf

    • https://polirafula.weebly.com/uploads/1/3/4/5/134528493/391410.pdf

    • https://s3.amazonaws.com/dudigonifu/injustice_2_reddit_guide.pdf

    • https://static1.squarespace.com/static/5fc0e99a0a2757459be2ef6a/t/5fc1ba834f98375720206481/1606531716844/degedizox.pdf

    • https://static1.squarespace.com/static/5fc56e29bdb33045eee0a17c/t/5fca475d55485c3109be2a88/1607092063860/smart_charge_car_battery_charger.pdf

    • https://sefedajexoxoj.weebly.com/uploads/1/3/4/4/134479396/mazepadov.pdf

    • https://s3.amazonaws.com/paropabaru/airmen_mock_test.pdf

    • Show all