Resubmissions

03/07/2023, 23:01

230703-2z2vdaad45 7

03/07/2023, 22:59

230703-2yc5mabg7w 6

General

  • Target

    MDE_File_Sample_08015cd45c7b4c56a6d9151616ea597aa03e3f67.zip

  • Size

    27KB

  • MD5

    c220e1e40fcc3fee235e1ecf9812baab

  • SHA1

    1ecf0ef6f44f9dd06666fcb10bd7cf945903b2b7

  • SHA256

    d77b28a973fb397cea0dd39792a78ff8b2aa46f2b8c7b1087036816eb80ca1d7

  • SHA512

    d21d1755853425846431de621a2842135ca7c194b0683095117a4f9155803e0298019a9a5302da1908a0d5c8908d9a86bc0f4dc73732c1039c370781faea4df8

  • SSDEEP

    768:sKkz3N7tO7y7hlawblfoXcGSWOfRNtEBT/HQFbZyr9X8vitGE5UolLO:fKdJfbVeyLfbtvhQeaxVdO

Score
6/10

Malware Config

Signatures

  • Malformed or missing cross-reference table in PDF

    Malformed or missing cross-reference tables are often used to evade detection

  • HTTP links in PDF interactive object 1 IoCs

    Detects HTTP links in interactive objects within PDF files.

Files

  • MDE_File_Sample_08015cd45c7b4c56a6d9151616ea597aa03e3f67.zip
    .zip

    Password: 1234

  • Emision de factura30031[24747].pdf
    .pdf