e4d2799f3001a531d15939b1898399b4[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e4d2799f3001a531d15939b1898399b4.bin
Size

482KB
MD5

cc1a7f3291d9937aa4250caa52a97a27
SHA1

31ca5986062debb7939b9431c16d678ee2847251
SHA256

9a4e3863d94bfa8c4e4a59e4a62ee9a9d0f7f6d4e9928d7415ce5a369cdb1949
SHA512

987282d39c9717801baed5ab786b1dd6729b76eb15d6e5d74cc1e975a7e64033beb280c5362c0dd05c0294b96f500cd90a78b4a5e6ec5f4cd96e0bf6f06cbe1e
SSDEEP

12288:pSXRszx0n5vljq5FjIj5O9Qz7wAjKr/wy:pKE2Dm5Fjg7hju/wy

Score

4^/10

pdf link

Malware Config

Signatures

HTTP links in PDF interactive object 1 IoCs

Detects HTTP links in interactive objects within PDF files.

resource	yara_rule
static1/unpack001/fc85d3da6401b0764a2e8a5f55334a7d683ec20fb8210213feb6148f02a30554.pdf	pdf_with_link_action

One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
pdf link

Files

e4d2799f3001a531d15939b1898399b4.bin
.zip

Password: infected
fc85d3da6401b0764a2e8a5f55334a7d683ec20fb8210213feb6148f02a30554.pdf
.pdf
Password: infected
- https://dian.server.tl/
- http://dian.gov.co
- https://www.dian.gov.co/notificacionespersonales/contribuyentes/radicado-9001205