Behavioral task
behavioral1
Sample
d96bd7bdb83932a81c02ceb4aff61ae804a542b40f45ec5fe3d0ad2c8492d4fe.pdf
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
d96bd7bdb83932a81c02ceb4aff61ae804a542b40f45ec5fe3d0ad2c8492d4fe.pdf
Resource
win10v2004-20230703-en
General
-
Target
82b700b321f4a07c0c0d4a7c368b2bab.bin
-
Size
28KB
-
MD5
3e4110c36e12777d888fb5375dafbcb8
-
SHA1
f5abaf596a0df6a5d9c9fa9f8245e9eac891ffe3
-
SHA256
009efecab53bf58620539320a571901fd53427a0fa8e2ff4dd51e6ba7713f9b6
-
SHA512
487f0fedc50d74199bcb28890062d00882b9b40ea7b64648889cb66fe9822bb714bd984f924166901db3c2e26448d78abf71469758a14f08bdb2e2d162306897
-
SSDEEP
768:xjrBE44niKyJQd3yQpb//RtGOOU5Z6gR4HuW/pd:BrLKy10bHhn5IgR4HuWBd
Malware Config
Signatures
-
HTTP links in PDF interactive object 1 IoCs
Detects HTTP links in interactive objects within PDF files.
resource yara_rule static1/unpack001/d96bd7bdb83932a81c02ceb4aff61ae804a542b40f45ec5fe3d0ad2c8492d4fe.pdf pdf_with_link_action
Files
-
82b700b321f4a07c0c0d4a7c368b2bab.bin.zip
Password: infected
-
d96bd7bdb83932a81c02ceb4aff61ae804a542b40f45ec5fe3d0ad2c8492d4fe.pdf.pdf
Password: infected
-
https://tinyurl.com/22f94pkz
-