General

  • Target

    Forcepoint - Statment of Work (TAKAMOL PoC).pdf

  • Size

    497KB

  • MD5

    add1b6f4df1fd27b653acb7ace76c119

  • SHA1

    2656ea4fd7dc762efcc7b5361c2f520fa4612c0c

  • SHA256

    0ebc121b5f78e95b18f6af37f145f7bef37baf00fb10fa92e86e5256ff54be67

  • SHA512

    5b5d881ddc754c208d54c8ac33a3cc123fdeae21a30fe20271d576471ba2d2195afee1301017b3a939d4c9fe10ce4252cbb67ff36616f90e2dce9598a066b685

  • SSDEEP

    12288:HB3SJ5dnhIjKY6yZDEl7gm+ITGh9tJwV1L:HB3SBnKjKll7avh9IV1L

Score
4/10

Malware Config

Signatures

  • HTTP links in PDF interactive object 1 IoCs

    Detects HTTP links in interactive objects within PDF files.

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • Forcepoint - Statment of Work (TAKAMOL PoC).pdf
    .pdf
    • https://wbsncdn.s3.amazonaws.com/downloads/files/v10.1.0/AVAM-DLPAE-Virtual-1010.ova

    • https://wbsncdn.s3.amazonaws.com/downloads/files/v10.1.0/Protector1010.iso

    • https://wbsncdn.s3.amazonaws.com/downloads/files/v10.1.0/ForcepointDLP1010Setup.exe

    • https://aka.ms/vs/17/release/vc_redist.x64.exe

    • http://securitymatterz.com