General
-
Target
1e4b4f33c79700e905bf3e5aec675a48
-
Size
116KB
-
MD5
1e4b4f33c79700e905bf3e5aec675a48
-
SHA1
c156c6468c0847f2d1b44886aa4c622ee8f9b1e1
-
SHA256
afad6a0713958500f32235cf60edc989adec6da6b2a38ac94d5581b804646494
-
SHA512
f4f44a7f644bc8554089ea4e4b66eba1fb341f4909d031385ebd3fa06cd10eae2cdbba0b370c1c49dbc4932df5973ba00beec5182775a445bcd8a7048a09d5d4
-
SSDEEP
3072:ro52hehwksFwHBMO4C0fZEW1ovLYjJpWdIRnlEI:YMeFscMO4CQZ71ovLRI5z
Malware Config
Signatures
-
One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
Files
-
1e4b4f33c79700e905bf3e5aec675a48
-
https://feedproxy.google.com/~r/sq/ugae/~3/eaN1Eb74jJI/square?utm_term=steam+turbine+in+nuclear+power+plant
-
https://static1.squarespace.com/static/60aac52a97a1d73ddacfe14c/t/60e8f23937da2614570be841/1625879097551/61315002243.pdf
-
https://static1.squarespace.com/static/60bf6bff0d8d387fecc8b153/t/60ecac8997282d6f46943739/1626123401499/37_relapse_warning_signs.pdf
-
https://static1.squarespace.com/static/60aac59fb7e9621e2f466549/t/60e93e7cb68d8f0f4bf938a6/1625898620726/your_dns_server_might_be_unavailable_windows_10_fix.pdf
-
https://static1.squarespace.com/static/60aac5994c6b1805bc4acbdb/t/60e7fc5a4d2175279d14af9a/1625816155114/xoxidovojoro.pdf
-
https://static1.squarespace.com/static/60bf6c89a2b0b938881bcf91/t/60edc2ed6f11847873593e85/1626194669745/mebupulirasabowuzimawago.pdf
-
https://static1.squarespace.com/static/60bf69b23f3791685666e32d/t/60e818057d3b385c94b7e633/1625823238065/befufajawifafolenula.pdf
-