General

  • Target

    3c218594fe3db33cff5c3d4dc7b5b14c.bin

  • Size

    8KB

  • MD5

    ebbdfc7bf2d19f96f7959296b7fb17c4

  • SHA1

    4515f6ad1e238aefeb320125176547c35fcbd8c9

  • SHA256

    bcaf5ed1924869dbc9573097dff5f9f4a83ef1208617cdcc3f700c13fd05f8f7

  • SHA512

    9c64fc49680ae1042dfc0e72aa6d5b2401e47b3ea7c6af846163da58ba792f3bd818401b61d5998536453122745735929c60ba7dce5d6d26b6e3e8be285e225d

  • SSDEEP

    192:vj3fS7SQVUDQ2MwlqdmOqp0fCvD9euH+VoBKoHtgKkn9fYmD1+B:L3fASvMiqdmR8CR3OsJuR9fRD1u

Score
6/10

Malware Config

Signatures

  • PDF contains JavaScript

    Detects presence of JavaScript in PDF files.

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • 3c218594fe3db33cff5c3d4dc7b5b14c.bin
    .zip

    Password: infected

  • 8f8264c173e6d036e87b706dbb87e3036ae17df32e53a683c87bff94fce2c242.pdf
    .pdf

    Password: infected

    • https://bit.ly/newbookingupdates