General

  • Target

    APT.pdf

  • Size

    1.3MB

  • MD5

    9c89e9d1c1f7ae8ea4a5442c58220de0

  • SHA1

    b967aaf41aa27325c51884f3c0bd355cf306c185

  • SHA256

    7d33547846ad28d4b1a074db1eccf376ca52b9afe25708b8820fcc6031740bab

  • SHA512

    94a1ddaeaa7e4ff8ad0834651a43e8efee48f63b6ac87a293ea74b920b5783f6d958b02c6b6ff90d356207d73727352ff2d920968856a4213210ac4ca0c8acb3

  • SSDEEP

    24576:0gtnVRLKvCZTFcJIDtrfPAbl9sz/K3O/xrvLGEgiaCKuCVQ3Sy:TrYkGSDFfYblKz/UO/ZvStrVuIISy

Score
3/10

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • APT.pdf
    .pdf
    • http://nextcl0ud.0x0security.com/

    • https://www.notion.so/19e5fcf8bd8c4f36ba6b81035383dd15#66f46376064d455a9a2b0b42435a231d

    • http://0x0security.com/

    • https://github.com/drk1wi/Modlishka

    • https://www.notion.so/19e5fcf8bd8c4f36ba6b81035383dd15#d11a947ffdbe46fcb2e34466c6a21b7a

    • https://www.notion.so/19e5fcf8bd8c4f36ba6b81035383dd15#3b9eab106e9a4216b6ba014b3ba484e4

    • https://www.notion.so/19e5fcf8bd8c4f36ba6b81035383dd15#740a8bc5ee1245c9abf630a00e1213f2