General
-
Target
NEAS.d75116fd6f2d9a960f4bf538f2ce37f0_JC.pdf
-
Size
304KB
-
MD5
d75116fd6f2d9a960f4bf538f2ce37f0
-
SHA1
61ab83bd098a35daee925d3729eb2f873228c038
-
SHA256
74213dcaa9b171e12fde3e9e55775f3a7cfe6d2f7da1af7cd714814c1c143f33
-
SHA512
04b93559045f2b8155ffc01fec3280efa636e7dc3ae78bb2587f259c09433d55fb67d6f4bbd927661e2e18974c67dfab18125c48b566a9607a46c489346c9f9f
-
SSDEEP
6144:EM75zuW3ZtvvmStwlNhMgyRhApopkaT6p4QyUMv172T:EM75iWNtcnMgGhAeepGv1aT
Malware Config
Signatures
-
One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
Files
-
NEAS.d75116fd6f2d9a960f4bf538f2ce37f0_JC.pdf
-
https://rogikamijujade.yftejum.com/5377675037952007370001?zakinubinozobexujefefoziwamixuzemibedixavixobelovusojimowafoferoguruvotixedixemavoxom=jusoredazokurujijeseninaretasobowerasojotatabavisetajaganagikomaremituwirilenipalizugosomekerukabutomazutonexerudapefakotaxawuzabarinuzeladogegejopadabepepuzofadavelipelimivejegelarisubilalafaguxapidok&utm_term=brassed+off+play+script+pdf&rokikeripefupajekigixuwulavonusiwojerogexexenoregowunozusepovaxafawawemiromijujogatajagorobe=poridamobogitepopuwutugegelibovegobinagetawopepulopemuzirasovobitenatavatolidapawamifexewodirotinogetevar
-