a0ff6ebeb469350917910ad1a0870dc3ac5c6911c811da4e0ec87a310b1190a3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a0ff6ebeb469350917910ad1a0870dc3ac5c6911c811da4e0ec87a310b1190a3
Size

737KB
MD5

ab41e617f223121122ca1fc9df7a9ada
SHA1

e8adec1404b859079dbc7fa2dd05c47f99f1cc98
SHA256

a0ff6ebeb469350917910ad1a0870dc3ac5c6911c811da4e0ec87a310b1190a3
SHA512

d74a175dfb843ec3afe77d243949c5e4e48aae9437be9465958c2655c533ab36d26c600b514a74dd7e0b4b0a8f7f6acfff96fdb081023a8ee536a85cc8c47e27
SSDEEP

12288:Loy1lYftnMjT0Mad5AGN6i/mM6u5jcGaJh8w1zhujrCiIhUfQNd6ZsH:L9lYFnMjTsxtDyh8uHNDH

Score

4^/10

pdf link

Malware Config

Signatures

HTTP links in PDF interactive object 1 IoCs

Detects HTTP links in interactive objects within PDF files.

resource	yara_rule
sample	pdf_with_link_action

One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
pdf link

Files

a0ff6ebeb469350917910ad1a0870dc3ac5c6911c811da4e0ec87a310b1190a3
.pdf
- http://studadm.nou.edu.tw/FileManage/download_recruit?categoryId=18
- http://solstud.nou.edu.tw/sol/signup/
- http://studadm.nou.edu.tw/FileManage/download?categoryId=12
- http://studadm.nou.edu.tw/FileManage/download?categoryId=13
- http://new.nou.edu.tw/931/appendix03.htm
- http://www.nou.edu.tw/
- https://studadm.nou.edu.tw/Recruit
- http://enews.nou.edu.tw/enews/
- http://campus.nou.edu.tw/
- http://www.hcbus.com.tw/big5/information-2.asp?select=2&button=%E9%80%81%E5%87%BA
- http://ibus.hsinchu.gov.tw/Public/Mobile/MRouteQuery.aspx
- http://studadm.nou.edu.tw/FileManage/download_recruit?categoryId=18en-US
- http://solstud.nou.edu.tw/sol/signup/en-US
- http://studadm.nou.edu.tw/FileManage/download?categoryId=12en-US
- http://www.nou.edu.tw/en-US
- http://studadm.nou.edu.tw/Recruiten-US02en-US-en-US82822912en-US02en-US-en-US22829355en-US6801en-US6802en-US02en-US-en-US22859513en-US
- http://enews.nou.edu.tw/enews/en-US
- http://campus.nou.edu.tw
- Show all