Behavioral task
behavioral1
Sample
18c130a4a25ec9fb6ec86e15a759ec50639e0ee409e9f6e787251abbd39f04b8.pdf
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
18c130a4a25ec9fb6ec86e15a759ec50639e0ee409e9f6e787251abbd39f04b8.pdf
Resource
win10v2004-20230220-en
General
-
Target
9548600826.zip
-
Size
42KB
-
MD5
044fee604e295742a412699b069a4109
-
SHA1
5bd581ea846183075e5c48df768af86dc63461a7
-
SHA256
4c849e69ca80c77cce8c5bb5ab94f82ea16a6a82a094a9f428441799db1901f9
-
SHA512
dd6c8c099e3cad930b67a136ebeefad6ec3f363ddaa143c79eecabe5cb6fe7d56208664f9154afd361d858d700b83170090e5acdbb513ad2a4ef8f865eda3774
-
SSDEEP
768:JIgOD9ulfXe2xXVwp5OF0hZVnTCptUcyBkpCsw9DNkNHN5aKhByIjk0TdLv:JeD0k2xu5gcjTC//SkyulyNaV
Malware Config
Signatures
-
HTTP links in PDF interactive object 1 IoCs
Detects HTTP links in interactive objects within PDF files.
resource yara_rule static1/unpack001/18c130a4a25ec9fb6ec86e15a759ec50639e0ee409e9f6e787251abbd39f04b8 pdf_with_link_action
Files
-
9548600826.zip.zip
Password: infected
-
18c130a4a25ec9fb6ec86e15a759ec50639e0ee409e9f6e787251abbd39f04b8.pdf
-
https://borec.com.ua/e-documentation.html
-