General
-
Target
MDE_File_Sample_d0f1326aaf883d2d1d3a37f539235dd5564ddbc0.zip
-
Size
605KB
-
MD5
60c2bb5bbbfdd02329067b57409bb711
-
SHA1
5a283a4540c394674c9166f014205b9dd0db280e
-
SHA256
12facd686a80bec55aa2e9728f72d0c50a3c205ccf8e03d3a87f4d2fca335106
-
SHA512
0ccfc8c2fd3347c7ddcaed0f1dbcf9bd4edc4639fbabefb4313a9638dbb0c04bde163628973c6a975e77e61915968cddd97f036fc60e1e83bc658a2871d75bf5
-
SSDEEP
12288:FZo1oOWRPhfWwfm5UW6AW9zqFOLJwXKForynUN3qgcX:ooOWRPbmSW679zu6FaNa3X
Malware Config
Signatures
-
One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
Files
-
MDE_File_Sample_d0f1326aaf883d2d1d3a37f539235dd5564ddbc0.zip
Password: infected
-
AppleCase-7124123121-55424[3284].pdf
Password: infected
-
https://t.co/K6yng79Yym#kimanyaikam
-
https://redirect.privy.com/link?original_uri=https%3A%2F%2Ft.co%2FkJEILWAKLV%3Futm_campaign%3Dprivy_4004629%26utm_medium%3Demail%26utm_source%3Dprivy%26utm_email%3D%2540%2540%2540%2540H0W4UzFoqR0gkEeSuvhA9qeUqvNsvXVXMO%252Fzq%252FcKBEnS899Z%252B7ctpqqDLhtX8o5RAuKcs%252B6VejuHJ7lCdj%252BfPcJ%252F3O77%252B9OyyDTadwxwxLht3R50F8xjrs7FCQSn%252BFjsxKBDtG0zU0McazB%252BcYU8NxK3WW17x8GgKdgVElKtophWUjex8vKo1zhzaiHgc5IKgpSKLluP82U8Domp5RG4nTumIGJGawaM0gCJzXEHOxYXzkpfw98qR36ub4Vm87MdKcolsiMthWMfxgOIg30y%252FWhdzDRDHV3A3XrWyVQQmHgGINfXMiNHgrXqAbOkHroo2880GlaD5DKBRr46W8SKgTZKlbn9giE4Y5alVZPWL1REnINRf1pgK8VVEuc7k2RGfStLyHz4L6AYNTkEy170IA54rl8CnaeOpAgSyPH5FS3cnj1%252BUiksN1mKBoT9%252FHFaILyX5P2fvYK3bcNze22rvKkyZpnu927KMfgF2k4XEQhR4Ll7ZyozK84huXiaXGgdE%252F2mzVRMPoXo3XXtPpj0ISqK5pzqMztS9SLuHBvAV4lsWet4hf3jWgKys%252Ft8SDpGDhZdeE6VBfbdErUnAPU1cSe6stuaKZM8nWXMnf1wZ3ali6BhHRDv%252Bfe%252BDFAaqkIHZIdZzXQrF1hflUDFacxsZ5Lr617d9klFq8AvKPb1eeLlJZI%253D%23read1&campaign_id=4004629
-