General

  • Target

    FERRET_6.4.7z

  • Size

    18.5MB

  • MD5

    c3f0d0c4c6f28f7fbb77ae74cf62cdba

  • SHA1

    864dbe4c79b6e0b4a0c45b9c03f2ecbe8200f1f4

  • SHA256

    160fb22e0edfaf59da262edcf02d913302756685a6b85fcff7ed9d830ef91190

  • SHA512

    8e2c3ce6103368f589b23d12aa9e4bf98fc876a47fb6e1b4b5b81bfdb83e138b523fc6aa05a410e672663daa13c0eb73017998319518daff59f0963fd6eec615

  • SSDEEP

    393216:b+PuiCwqUxboHGkuplChrJ/6Kgbzc3l9I2shQC9ahnV5YO/qIwkJBx/:buzCwqUquplCNN9gbKzIJh8VFqror

Score
4/10

Malware Config

Signatures

  • HTTP links in PDF interactive object 1 IoCs

    Detects HTTP links in interactive objects within PDF files.

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • FERRET_6.4.7z
    .7z
  • FERRET_6.4/CB46333856.zip
    .zip
  • CB46333856/CB46333856.msi
    .msi
  • CB46333856/CB46333856.pdf
    .pdf
    • http://pasupport.schneider-electric.com/

    • http://pasupport.schneider-electric.com

  • FERRET_6.4/FERRET.msi
    .msi
  • FERRET_6.4/debugSetup.cmd
  • FERRET_6.4/~BROMIUM/FERRET.msi
  • FERRET_6.4/~BROMIUM/debugSetup.cmd