General

  • Target

    tbct135.zip

  • Size

    357KB

  • MD5

    972409289c3932e0812c30df1798436a

  • SHA1

    f5230b880514474d7793edcfae2d70ac575b5aa3

  • SHA256

    0f8116ab0ca5811b9c6b7aee55958978a54b2bfd70deafa219e93f139ad69642

  • SHA512

    f7f346711cd3a16ea353434419200de6f386a2f4749cee1aa5db8c4876504c211de37ac02f73e8453e86cf70c6faec30eddf098e67a3d25c2fd5773b9711e697

  • SSDEEP

    6144:DolhsiPTbP3fPHIJmmWntShM2+N2YthwSwG+aWgmSC9Z25bV7Xd4AQhFL81uJggn:DolXPPfPHqmmh+fhB+3azWZ31JggyJ2

Score
4/10

Malware Config

Signatures

  • HTTP links in PDF interactive object 1 IoCs

    Detects HTTP links in interactive objects within PDF files.

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • tbct135.zip
    .zip
  • ThinkBiosConfig.hta
    .hta .vbs
  • Think_BIOS_Configurator_Manual.pdf
    .pdf
    • http://support.lenovo.com/us/en/documents/ht100612

    • http://www.movable-type.co.uk/scripts/tea-block.html