General
-
Target
MDE_File_Sample_da91910a55b39f3ffedaec1547adc216f55de36f7bd2f708f620be2daaf8918b.zip
-
Size
3.7MB
-
MD5
60afeaf9ba6e8f472b3387e3f34a20d2
-
SHA1
bf92101189df6d9494a62643b912b0cfe58ced5b
-
SHA256
f751a6bf9e443003ddc2ee93f352a86060c86b7c4feb9d0cc78697353f89802d
-
SHA512
b3379d632cdbc838983636bc1e2cb86a2f277b00642bd9c9c9bd109f0ae77b38f2de68b75b732f6e7fb0d024210beb20f2e693b9e3ac2db3efe7768bf9dcc9bc
-
SSDEEP
98304:2mb1l3uCpbfShTsFU45RGPK+GVhUstv7yYUp:VegShT2VuPK+yltv7yYUp
Malware Config
Signatures
-
HTTP links in PDF interactive object 2 IoCs
Detects HTTP links in interactive objects within PDF files.
resource yara_rule static1/unpack002/1.9 Document Control - Rosario Yanson.pdf pdf_with_link_action static1/unpack002/1.9 Planning Engineer - Ibtisham Zahid.pdf pdf_with_link_action
Files
-
MDE_File_Sample_da91910a55b39f3ffedaec1547adc216f55de36f7bd2f708f620be2daaf8918b.zip.zip
Password: Neom@123
-
1.10.3 Personnel CV.rar.rar
Password: Neom@123
-
1.9 Construction Manager - Joao Gomes.pdf.pdf
Password: Neom@123
-
http://gmail.com
-
https://www.linkedin.com/in/jzg-pt/
-
-
1.9 Document Control - Rosario Yanson.pdf.pdf
Password: Neom@123
-
https://www.linkedin.com/company/sajco
-
-
1.9 Environment Engineer - Nazeer Ahmed.pdf.pdf
Password: Neom@123
-
1.9 Environmental Manager - Fazal Ahmed Khan.pdf.pdf
Password: Neom@123
-
http://yahoo.com
-
-
1.9 HSE Manager - Naiem Elmasry.pdf.pdf
Password: Neom@123
-
http://yahoo.com
-
-
1.9 Logistics Manager - Mohammad Muneer.pdf.pdf
Password: Neom@123
-
1.9 Maintenance Manager - Ibrahem Bin Dhabab.pdf.pdf
-
1.9 Planning Engineer - Ibtisham Zahid.pdf.pdf
-
1.9 Project Manager - Akim Hank.pdf.pdf
-
1.9 QA-QC Manager - Roy Carrilo Orang.pdf.pdf
-
1.9 Sustainability Manager - Fahad Mahmoud.pdf.pdf
-
1.9 Technincal Manager - Serge Aouad.pdf.pdf