General

  • Target

    politicadefirmav2.pdf

  • Size

    1.2MB

  • MD5

    f627d990596a8f108320e8b18988f922

  • SHA1

    b1b704090eeffb2fe6dce701089caf9a4061b45b

  • SHA256

    74ca0cbed706e5a233818a34b48b1241e5490439d49df48e7c1a715eb9a8af46

  • SHA512

    65c8f0d59f671909f68fa3721b1f2401a2db39f24677f7c9c514c27a2ae5a8083bcd11b6ee98899093a97e51aeed7002a4c8fd842e9d54c702cb3a87c713d979

  • SSDEEP

    24576:H+8scFzeYZCY/YHQrveI0iFEKRSwnhQEchGvvmziaYF3:dPl3awVSziaYl

Score
4/10

Malware Config

Signatures

  • HTTP links in PDF interactive object 1 IoCs

    Detects HTTP links in interactive objects within PDF files.

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • politicadefirmav2.pdf
    .pdf
    • https://facturaelectronica.dian.gov.co/politicadefirma/v2/politicadefirmav2.pdf

    • http://www.w3.org/2000/09/xmldsig#sha1

    • http://www.w3.org/2001/04/xmlenc#sha512

    • https://es.wikipedia.org/wiki/SHA-2

    • http://www.w3.org/TR/xmldsig-core2/#sec-Algorithms

    • http://www.w3.org/2000/09/xmldsig#rsa-sha1

    • http://www.w3.org/2001/04/xmldsig-more#rsa-sha256

    • http://www.w3.org/2001/04/xmldsig-more#rsa-sha384

    • http://www.w3.org/2001/04/xmldsig-more#rsa-sha512

    • Show all