General

  • Target

    Citadele1018.pdf

  • Size

    72KB

  • MD5

    4e9a48842158e4e906a737b3d388ed09

  • SHA1

    b5f1d62457154f4acb224e27266b74cb1c739784

  • SHA256

    f5765fc7ebec73760b00ed087dcb2e7dd91700ef13889b537cfb35dca73c03b7

  • SHA512

    1daf2cdddafb52b1b59e3460223fd5ab2fc1a61f6524e5711a5d6cc47cd64b0dcd1e2f62cc78f6f51fc2dd40880b36d73380800729d51b812cd3cce89940a8cc

  • SSDEEP

    1536:0Gd7qHFtOKZipQCTZ89YTVexztdT1pI0MLQF2C/hyli:1d7ibOkipQCTZ8mTVojT14VC/hf

Score
4/10

Malware Config

Signatures

  • HTTP links in PDF interactive object 1 IoCs

    Detects HTTP links in interactive objects within PDF files.

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • Citadele1018.pdf
    .pdf
    • https://portaldoaluno.visaoportal.com.br/.well-known/pki-validation/z/aspx.php