General

  • Target

    4d8859e531c37145d4f76bb5c6fac0e5

  • Size

    1.7MB

  • MD5

    4d8859e531c37145d4f76bb5c6fac0e5

  • SHA1

    8852152169ad03d726288906c846812b29415764

  • SHA256

    e596bae812faba75832387009ee2dac1dbff5491d352951b0f1e66342dfe2b26

  • SHA512

    75a22cf397f6e0e3289fbe07f7f8bf096ba204e146f17d41894285981abde4c51f17f184255c181e47228aa0f766ebbfd7db0f5202c6938a56ee5c5ed35d0469

  • SSDEEP

    24576:kKlnsRB1ERiy/OJ6VZPSRbuUe9+t0zRJqNaonwzgfR+HkE2fNe14E2YDmU1PbxIW:k2nsIiuOgiRuH0t0zLNPycl+MZ7CuP7

Score
3/10

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4d8859e531c37145d4f76bb5c6fac0e5
    .zip
  • HDDScan_v31/HDDScan/DEFECTSL.xslt
    .xml
  • HDDScan_v31/HDDScan/DEFECTSP.xslt
    .xml
  • HDDScan_v31/HDDScan/GREEN.ico
  • HDDScan_v31/HDDScan/HDD.jpg
    .jpg
  • HDDScan_v31/HDDScan/HDDScan-eng.pdf
    .pdf
    • http://hddscan.ru/

    • http://hddscan.com/

    • http://www.alphaskins.com/asdwnld.php

    • http://hddscan.ru

    • http://hddscan.com

  • HDDScan_v31/HDDScan/HDDScan-rus.pdf
    .pdf
    • http://hddscan.ru/

    • http://hddscan.com/

    • http://www.alphaskins.com/asdwnld.php

    • http://hddscan.ru

    • http://hddscan.com

  • HDDScan_v31/HDDScan/HDDScan.exe
    .exe windows:4 windows x86 arch:x86

    96a92f50daa5d7e24f0dffbec7fbec89


    Headers

    Imports

    Sections

  • HDDScan_v31/HDDScan/IDEID.xslt
    .xml
  • HDDScan_v31/HDDScan/RED.ico
  • HDDScan_v31/HDDScan/SCSIID.xslt
    .xml
  • HDDScan_v31/HDDScan/SMART.xslt
    .xml
  • HDDScan_v31/HDDScan/SMART_SCSI.xslt
    .xml
  • HDDScan_v31/HDDScan/TEST.xslt
    .xml
  • HDDScan_v31/HDDScan/YELLOW.ico
  • HDDScan_v31/HDDScan/what's new - eng.txt
  • HDDScan_v31/HDDScan/what's new - rus.txt