General
-
Target
NEAS.0d163b0bb58dfc9a3cf9f9c6c5622a40.pdf
-
Size
118KB
-
MD5
0d163b0bb58dfc9a3cf9f9c6c5622a40
-
SHA1
3d6c3104c5e18cd944a5464a9568a0b13ff603d9
-
SHA256
89ab04693a331ebf66995aca405c3463a74dbafdeb2adc632ee8ec38244e0c1f
-
SHA512
14f4bec0a4405dbdab4269de15671af8f1c2806296f467833260c60be2b2539ee3fc7d21ef2c26c60f7f76ab65a9a99ee97540dd33a1f16ad585f0fcd7cf73ad
-
SSDEEP
1536:vnH+80m3GtfiWmX2RgBkLZavodiVBJ3M37XMOANB7jOF5bnCem7s2kMTLoF:j0jIkUDVb3M3TNw65DCemog+
Malware Config
Signatures
-
One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
Files
-
NEAS.0d163b0bb58dfc9a3cf9f9c6c5622a40.pdf
-
http://evacdir.com/chestnut/mohamed/octets.hourigan.SW5kdXNvZnQgV2ViIFN0dWRpbyBWNyAwIENyYWNrSW5.ZG93bmxvYWR8N25OTWpoc2RIeDhNVFkxTlRRd09UTTFNbng4TWpVNU1IeDhLRTBwSUZkdmNtUndjbVZ6Y3lCYldFMU1VbEJESUZZeUlGQkVSbDA?usage=ramberg
-
http://ulegal.ru/wp-content/uploads/2022/06/andrjaem.pdf
-
https://www.sedaguzellikmerkezi.com/cybershaman-full-version/
-
http://mytown247.com/?p=59578
-
https://www.iofreelancer.com/wp-content/uploads/2022/06/abrnaf.pdf
-
https://www.winetoday.org/z-toolkit-v3-boot-disk-58-_top_/
-
http://www.tcpdf.org
-