General
-
Target
Document-Statement-32152.infected
-
Size
188KB
-
MD5
76e77c53bdee5e88c627bffa36f12226
-
SHA1
1a83f7ecb001b723d6404355b807402e7939f5e4
-
SHA256
dd5356a6b6dced10931282f396114f3f8f38045710781b59addab62cdd7e2602
-
SHA512
25e47df6c92cdc665fef452add447ea3f69f781590289dcd5569ebac206b0d95979542972baa00738a16fd40db312cf1743d3ea41c2332d38c7022c5c20928c3
-
SSDEEP
3072:EZu9l6ugdu8ZwqUn51FncNhZ1N4q7G1ehPdlholE2zg/UB4FfDZjZDzkjnfLLRD:WuefU8ZwBn50hZ1b7GA3lUBc/bFf1ZDm
Malware Config
Signatures
-
One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
Files
-
Document-Statement-32152.infected
-
https://trk.klclick3.com/ls/click?upn=h9p0fvGcFIPRQ8wbZ7hq30IH4-2B-2Fs1YCBdPeNgoMpe5wVSXetjlAIyyx4aL8UFpLeHxe__Za98whu9h54I3j0NJ-2BGorJkEvk7dcRqKWBfvlx5dJbgNGggkvXVEZHqFD1qyIKykozPXgewAhPFGQiuAz0IAQQakvraEl3MFYBWT6s6TBwdNunlrS5yi0INt5hIRW7kk-2F0OZdckkdMDT9oAw3-2BNWozI9IYI-2BbM2oosII0eG8bkmo6M-2Fw7eCiBt3h70rtCWdNshhKrJidOetXChZ373AhFycsRHqPeI5oGNC1SqAbzsq-2F-2BvrEbSfS6M3E-2FFtnPBQMN7pPaBcmK7Zx9ZAxwvmHc1WfLvOiO92ZtxSoi0am9BBRRSoOy4zdW442fyqmogXI
-