General

  • Target

    11491249473.zip

  • Size

    136KB

  • MD5

    86afc64d88c27aafd7ffcf50744610ad

  • SHA1

    b58f7c9ee0d1b31f6c27d6ca27388d70f47df93d

  • SHA256

    1141750a4dd6b78415c889250d58d6bf8a839e7bdf0dbc1c54201022673c4045

  • SHA512

    dc5fbb4f41941f44a0a7dd4e0cefcf3053560d86a360d161f48d243068be4e24a755350a0d62848021049399ac213e037dfc683bf78f4ee96b257832c940488a

  • SSDEEP

    3072:obCDvvAyP69dOOgnW/gARD9ngqBZeEWq9tLDfsc9:SCzvr69dOO8XARxggeEzX0Y

Score
3/10

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • 11491249473.zip
    .zip

    Password: infected

  • 42d996f3ea94b33eee4212a2d8c48aafc5f7023fc48f9f54dcd20e41671a85cc
    .pdf
    • https://www.usaa.com/inet/ent_logon/Logon?EID=88183-1008_head

    • https://associacaomcsc.com.br/.pluh/govio.htm

    • https://communities.usaa.com/?EID=88183-1008_footer

    • https://www.usaa.com/inet/pages/usaa_mobile_main?EID=88183-1008_footer

    • http://www.facebook.com/USAA?EID=88183-1008_footer

    • http://twitter.com/usaa?EID=88183-1008_footer

    • https://www.youtube.com/user/usaa/custom?EID=88183-1008_footer

    • https://www.usaa.com/inet/pages/usaa_social_main?EID=88183-1008_footer