General

  • Target

    f279e05edd441fc059275643d268f0af.bin

  • Size

    63KB

  • MD5

    7a393ac92aeb1ce9f094f1698083b793

  • SHA1

    f749c7d06478b93a6b6bf0233efb727689aca241

  • SHA256

    903eccc86c78eb39431468d50d701c1a5200e137b39127000c97c8ddf25ce4b3

  • SHA512

    bf71d9ee4082f67f6e975556001f0290a63a3c61062a2e5f2336641d26b99097589b84d91f0973fa8e9f9126e1a30501a0c931f902bd609d9af16108315a6de8

  • SSDEEP

    1536:GPEIQDMQt2A4sifbRwSl0o7Hyiie2we8KABjmeT:zIbg2ntXHyNe2dZa

Score
3/10

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • f279e05edd441fc059275643d268f0af.bin
    .zip

    Password: infected

  • 833287e61ea3dd0cce3c37e3b047c41df867a067092edcf028a467fe4d8414eb.pdf
    .pdf

    Password: infected

    • https://coolcivilengineering.com/ircb/ircb.php