Behavioral task
behavioral1
Sample
Citacion73295R22cd2451a691901c6a5420[337999].pdf
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Citacion73295R22cd2451a691901c6a5420[337999].pdf
Resource
win10v2004-20230221-en
General
-
Target
Citacion73295R22cd2451a691901c6a5420[337999].pdf.zip
-
Size
51KB
-
MD5
ddea1f4aa10377ae817898aac9858aba
-
SHA1
620246925d13083845bda5771b1ce4bba0955c4c
-
SHA256
191482b4a931324726dacb49c604cf7cb20c8c49de41782a4975402f8ddec032
-
SHA512
736118a6ca6c4c93dce6a6b1828b2c8be91e24bcd3bd78d6c8602a5f576f7e9989fbe99baa87aad10efa55f19b22aacb87d42b7c60da3e2e153fea23a0c3c518
-
SSDEEP
1536:oHKb5KLorsIkv49hvtebrXFr+a33XwhDeh:oHKb5tzkABtenXFSAweh
Malware Config
Signatures
-
HTTP links in PDF interactive object 1 IoCs
Detects HTTP links in interactive objects within PDF files.
resource yara_rule static1/unpack001/Citacion73295R22cd2451a691901c6a5420[337999].pdf pdf_with_link_action
Files
-
Citacion73295R22cd2451a691901c6a5420[337999].pdf.zip.zip
Password: infected
-
Citacion73295R22cd2451a691901c6a5420[337999].pdf.pdf
-
https://gtly.to/FMhXAp6cm
-
https://www.fiscalia.gov.co/colombia//cd2451a691901c6a5420/Citaci_n_73295.R22
-