Behavioral task
behavioral1
Sample
ee7be4d37c1b821001d4e00f27c1ca14e374f67f2d0d89f26bac5017b7235a72.pdf
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ee7be4d37c1b821001d4e00f27c1ca14e374f67f2d0d89f26bac5017b7235a72.pdf
Resource
win10v2004-20220812-en
General
-
Target
8203416119.zip
-
Size
267KB
-
MD5
eafd18cbc8b1ffebb3ecafa82c1b3e4c
-
SHA1
db20b72ebacf35209b31b08696b6c7456cf7e982
-
SHA256
eee3cf9da6a5ad9a94f7855111cb90ed48db7e63e38d218a8c35f3176fb422cb
-
SHA512
75f2ca2f4632969daf6a9429f57b47ecb24f98f31c3b29a2f8588f5783eb9fee110f69df23ec859d85a1c43f4bcb8cf8b3ce860e698ccd7d73675771ebbc5e03
-
SSDEEP
6144:LsGKyCkqRsV6Vv0F7NyWc1BnUyamhLeapzaP:3KhAg0PKUVRapWP
Malware Config
Signatures
-
HTTP links in PDF interactive object 1 IoCs
Detects HTTP links in interactive objects within PDF files.
resource yara_rule static1/unpack001/ee7be4d37c1b821001d4e00f27c1ca14e374f67f2d0d89f26bac5017b7235a72 pdf_with_link_action
Files
-
8203416119.zip.zip
Password: infected
-
ee7be4d37c1b821001d4e00f27c1ca14e374f67f2d0d89f26bac5017b7235a72.pdf
-
https://rb.gy/gmmbpv
-
https://www.dian.gov.co/notificaciones/controlinterno/renta
-