INV1pdf[.]zip | Triage

Sharing

General

Target

INV1pdf.zip
Size

52KB
MD5

05ec1bfa8f136dc119233497b0ef21f7
SHA1

3882eee706b937eb3719c543d616f1786aa584a0
SHA256

f44b5ae59b7368e752de71ca07ac61b22d61370f326c34d17e2ba9e0ab513e5d
SHA512

df2c846d5f3c3a33b1526ae335d13d06c0da8e5c05dadacee858f6087d69f77e6a56f5246ca9bc4c88faac8aa718e2bd5ce40343c55c143ead8baf4450e21421

Score

4^/10

pdf link

Malware Config

Signatures

HTTP links in PDF interactive object 1 IoCs

Detects HTTP links in interactive objects within PDF files.

Processes:

resource	yara_rule
static1/unpack001/d9f2f82553ec178a507196b0a5c2ce7118c90676759a31230afbf0e686ff12ac.bin	pdf_with_link_action

One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
pdf link

Files

INV1pdf.zip
.zip

Password: infected
d9f2f82553ec178a507196b0a5c2ce7118c90676759a31230afbf0e686ff12ac.bin
.pdf
- https://thano.ml/cli