General

  • Target

    Contract_March_23_INV#21_pdf.zip

  • Size

    134KB

  • MD5

    ad17bf07fad8f1bcfa63d31bbbfc23b5

  • SHA1

    820b790d58b596d6a004b3010c3adc67b51c6785

  • SHA256

    88833bdbf2c5556146b10cbfe96f2c3530d80749ca2e985e4987b676f2c3f78a

  • SHA512

    55ef1472be971dd9c80c02a9caa4ed1f33f5598706ca8181a9be26021b0a5b7b93d7103933d8c0f3cfb7e6be784c620a38a3b9e9df09019a4a543cc8b8c38d12

  • SSDEEP

    3072:VbZz5YA9YZbhl+q4eQ4y6v1Ser0ZbRX2kIgPRWmFrqj++SDPYhR3dvV:bz5l4b+q4y3AbRZdFWj0PYhR3hV

Score
3/10

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • Contract_March_23_INV#21_pdf.zip
    .zip

    Password: infected

  • 70821bc9b2fa588abb7294c14e015695
    .pdf
    • http://170.130.165.74/lndex.php