General

  • Target

    42e7014f40480fc57af31896a10cbb53

  • Size

    85KB

  • MD5

    42e7014f40480fc57af31896a10cbb53

  • SHA1

    8060c180e380bde6f3faf38d9ba6e5979972d585

  • SHA256

    ac7cb7e3925ac4f172f5dcb9de4812a2c38c38db956661b30ec686f20d63fc2e

  • SHA512

    cd0ee8a2811bd361fa05bf8d692f4ed281cdafa5cce93e3044b3f443ae1878f1960b55ff8928b95e26be98d1e1c7293b4e69d9fd68ba34bdf0b039190ff69de0

  • SSDEEP

    1536:HEE+kAbJueqnS8K7Qst/AZDl9UPu+MRCB7Vou/qK/mW3Z1zIkobWUpO7KmeW:edu/K1/AZcWG/D/VZukou75P

Score
3/10

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • 42e7014f40480fc57af31896a10cbb53
    .pdf
    • https://feedproxy.google.com/~r/skout/mBVl/~3/fzgW7-mxBc0/uplcv?utm_term=what+is+the+past+tense+of+swear

    • https://travelselection.us/wp-content/plugins/formcraft/file-upload/server/content/files/16087d667cacf1---wisarit.pdf

    • http://mai-colle.jp/userfiles/file/mufumikigigo.pdf

    • http://robbinsfamilyhealthcare.com/clients/2/2c/2c787fa606fc56c3a3a24dfc5409695f/File/91212084476.pdf

    • https://gpuhub.net/wp-content/plugins/super-forms/uploads/php/files/kg2nunu0l883efpd8m0pssahp7/51316434099.pdf

    • http://www.canadiantreasurer.com/wp-content/plugins/formcraft/file-upload/server/content/files/1607658c25322c---93189129472.pdf

    • http://profisystem.ro/wp-content/plugins/formcraft/file-upload/server/content/files/160a7562707d76---pupaj.pdf

    • http://baanpowertrain.com/wp-content/plugins/formcraft/file-upload/server/content/files/160949fcf25c00---34301458937.pdf

    • https://gift-edu.ru/wp-content/plugins/super-forms/uploads/php/files/a55d269446e14cb8292f0c20d9b82e30/pepiworemumukutuluguxutam.pdf

    • Show all