General

  • Target

    north-korean__maui-ransomware.pdf

  • Size

    553KB

  • MD5

    4c13a722ef38859f94a34ee51197dd51

  • SHA1

    b827fd356c2d2022f50721b9d2ccdede281bc62d

  • SHA256

    4757b429f48dbaa407858d8af9e810bd86d07170d525090586db2beedef1b5c0

  • SHA512

    2e1f9f4219a264f153de26b19c56254edcd5e0a4c62efc7ab879fe43d351b8070079866b3f58db672d3c809aef305c7397d5f22045b93f57819958574584251b

  • SSDEEP

    12288:QZrCuYF6FhgBAyevOwlM+4GUP2hGjpIrVoI+j/j:QA/gFCSOC4m6d

Score
3/10

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • north-korean__maui-ransomware.pdf
    .pdf
    • http://www.rewardsforjustice.net/rewards/foreign-malicious-cyber-activity-against-u-s-critical-infrastructure/

    • https://www.cisa.gov/sites/default/files/publications/CISA_MS-ISAC_Ransomware%20Guide_S508C.pdf

    • https://www.cisa.gov/uscert/ncas/current-activity/2021/06/30/cisas-cset-tool-sets-sights-ransomware-threat

    • https://www.cisa.gov/stopransomware/

    • http://www.secretservice.gov/contact/field-offices/

    • https://us-cert.cisa.gov/report

    • https://www.fbi.gov/contact-us/field-offices

    • https://us-cert.cisa.gov/ncas/alerts/aa20-245a

    • https://csrc.nist.gov/publications/detail/sp/800-63b/final

    • Show all