General

  • Target

    5f1cbf74838d27942ccb69f2bdeccddeb57c8d14b9edfbdf76ca570427a86995

  • Size

    111KB

  • MD5

    9dcfd7b7daafaeb6de24547acc858586

  • SHA1

    f3bd2f7c2bf0360b690e42d2ccd790e7a15cf35d

  • SHA256

    5f1cbf74838d27942ccb69f2bdeccddeb57c8d14b9edfbdf76ca570427a86995

  • SHA512

    624313d5732f820de60ba855c93308fa4eef533f7c3c3936884c0754cc029355491ccb6cfa06b66cb3e2e799df4c320cf0a7105593f65c5c604b8d1c69066458

  • SSDEEP

    3072:94TQxT1rr5FyxPKV03jGWqZ7sIgGzkcSk1tgs:94TQz5F0m0aDZfNYjwtv

Score
3/10

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • 5f1cbf74838d27942ccb69f2bdeccddeb57c8d14b9edfbdf76ca570427a86995
    .pdf
    • http://ironport1.example.com

    • http://345Qwironport1.example.com

    • http://outlook.com

    • http://citicpru.com.cn

    • http://CO1PR10MB4516.namprd10.prod.outlook.com

    • http://mail-mw2nam10olkn2072.outbound.protection.outlook.com

    • http://NAM10-MW2-obe.outbound.protection.outlook.com