General

  • Target

    2a68cba26235d83006097e0f49381629

  • Size

    5.5MB

  • MD5

    2a68cba26235d83006097e0f49381629

  • SHA1

    304c20cac3e347d2140378f5b8bc9953181ea142

  • SHA256

    892f8033976008e90edce6f2c77fc9e4ae9c214f72d7a9591df4e8b18cdc6b94

  • SHA512

    05eb315244bf2f1dc1b9bbeef1077bbb53f602579a199aee465d9307abf6bbfe507ee60206b13bb061b887df45af4d751634b273fbbc0d8e999f83fc3dbe1172

  • SSDEEP

    98304:N3yNDkodEDSAPhknNZC4A26LqO6aJu20mSbTFbxGxpSRSUBIZGNQrcXG+L4z1f28:NCNLdEWcmtA26sV2roTrGmRrGRrcXGAU

Score
3/10

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2a68cba26235d83006097e0f49381629
    .rar
  • 安装视频.EXE
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 安装说明.txt
  • 操作视频.EXE
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 新云软件.url
    .url
  • 用户指南.pdf
    .pdf
    • http://www.lectrasoft.cn/�

    • http://www.LectraSoft.cn

    • http://Lectrasoft.cn

  • 纸样清单 2009.msi
    .msi