General

  • Target

    poster_2014_find_evil.pdf

  • Size

    1.8MB

  • MD5

    a3ec44b6dde3cdac0442c88de3ef9ded

  • SHA1

    66cf41a39d97444290a77ec5c16c10d4242e93fa

  • SHA256

    b11d2987361be54247a1ab5eb76b8f632c459fdee32804e97e1547e3ce65433f

  • SHA512

    a3849f66ffbd936676754ac09a19f63eda338ce84a909bcc8010b79d874680b38cfce6404880742670436789711d45d9b795b187ce04d1caad70c9e01b294b31

  • SSDEEP

    24576:ehoW49IgRHFpL7B2OzVob/4JAM9fbGWdr+2yQBLnvrgeXaC5woJPOrs70MYhDM+C:WOIgf2OzDbRa2DL0eJV42XibW

Score
3/10

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • poster_2014_find_evil.pdf
    .pdf
    • https://twitter.com/sansforensics

    • http://gplus.to/sansforensics

    • https://www.facebook.com/pages/SANS-Institute/173623382673767

    • http://www.sans.org/courses/forensics

    • http://digital-forensics.sans.org

    • http://sansforensicsdigital-forensics.sans.org/bloghttp://gplus.to/sansforensicsProcess

    • http://TTIONdigital-forensics.sans.org

    • http://sansforensicsdigital-forensics.sans.org/bloghttp://gplus.to/sansforensics