Behavioral task
behavioral1
Sample
d9f2f82553ec178a507196b0a5c2ce7118c90676759a31230afbf0e686ff12ac.pdf
Resource
win7-20220311-en
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
d9f2f82553ec178a507196b0a5c2ce7118c90676759a31230afbf0e686ff12ac.pdf
Resource
win10v2004-20220310-en
0 signatures
0 seconds
General
-
Target
INV1pdf.zip
-
Size
52KB
-
MD5
05ec1bfa8f136dc119233497b0ef21f7
-
SHA1
3882eee706b937eb3719c543d616f1786aa584a0
-
SHA256
f44b5ae59b7368e752de71ca07ac61b22d61370f326c34d17e2ba9e0ab513e5d
-
SHA512
df2c846d5f3c3a33b1526ae335d13d06c0da8e5c05dadacee858f6087d69f77e6a56f5246ca9bc4c88faac8aa718e2bd5ce40343c55c143ead8baf4450e21421
Malware Config
Signatures
-
HTTP links in PDF interactive object 1 IoCs
Detects HTTP links in interactive objects within PDF files.
Processes:
resource yara_rule static1/unpack001/d9f2f82553ec178a507196b0a5c2ce7118c90676759a31230afbf0e686ff12ac.bin pdf_with_link_action
Files
-
INV1pdf.zip.zip
Password: infected
-
d9f2f82553ec178a507196b0a5c2ce7118c90676759a31230afbf0e686ff12ac.bin.pdf
-
https://thano.ml/cli
-