627e1d05b9a4883b3158a68d7255f235[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

627e1d05b9a4883b3158a68d7255f235.zip
Size

1.9MB
MD5

2e0ed29dc2bc1cf72955fdf2c1ac82cc
SHA1

dd89c29ac293656c13e1385162fb496aee978d7e
SHA256

e3181b7bc46a3f8813aecfcfebe7e3e85cd89c0daff4a6ee011e3731d4f969b5
SHA512

7d4e1daad1b28847e90ff560f87a09b92a66311ff6e49d8a4ab429ccb6cd3bdf559d02760974b74397d4dd22956b493651fae30c3dbb115f8682f4bd9735b84f
SSDEEP

49152:/7h0XT7zGmX3z/xkfad286mgJeX14fOYdL:Dh0XT7zGmX316MF4fOEL

Score

4^/10

pdf link

Malware Config

Signatures

HTTP links in PDF interactive object 1 IoCs

Detects HTTP links in interactive objects within PDF files.

resource	yara_rule
static1/unpack001/627e1d05b9a4883b3158a68d7255f235	pdf_with_link_action

One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
pdf link

Files

627e1d05b9a4883b3158a68d7255f235.zip
.zip

Password: infected
627e1d05b9a4883b3158a68d7255f235
.pdf
- https://ipfs.io/ipfs/QmXoypizjW3WknFiJnKLwHCnL72vedxjQkDDP1mXWo6uco/wiki/Bhadradri_Kothagudem_district.html
- http://www.totaltraininfo.com/zone/central-railway.php
- http://-www.etrain.info