General
-
Target
NEAS.16e738042affebf0a59a3614e0a2b810_JC.pdf
-
Size
53KB
-
MD5
16e738042affebf0a59a3614e0a2b810
-
SHA1
18d64c221f2a8037183a7ce8d9e5430d9d7aa9d1
-
SHA256
cd01136887f24ead83b823cff6dab848f329e48e508decad30a9a914447bb6a7
-
SHA512
a5e9e6fcca1061155a3cc42bb926370cc4ae4fa15018271411f071670d9eeec7ec42dc229d32447577a36180db6f0da8740dbc65898380aaf7cf91a039e5c2e5
-
SSDEEP
1536:nDyz5/y4BXsDypFr52SFYLpgX6Mzlhr//I:nWz564lHpFr52SFYLpgvzlJ//I
Malware Config
Signatures
-
One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
Files
-
NEAS.16e738042affebf0a59a3614e0a2b810_JC.pdf
-
http://twcds.com.tw/pagesmate/moneydocs.php/aYmv_viivxYwtwvrblm18517129oa.pdf
-
http://valiant-yizip.com/index.php/umlstop/cnxdQfz18494330i.pdf
-
http://www.uchanter.com.tw/voicefield/filesmaket.php/wYclkPzt_btQfhiwhnnwaYot18224178aeax.pdf
-
http://ritatwo.com/growpdfs/haofYoPvs18103077o.pdf
-
http://www.pacific-square.com/index.php/filesquite/ecte18424141iow.pdf
-
http://shionn.s60.xrea.com/x/aska/aska.cgi?no=621807
-
http://twcds.com.tw/acrossmobile/wholeedu.php/site_map.xml
-