General

  • Target

    R1049408055.zip

  • Size

    232KB

  • MD5

    a31f2aa3fcd7f28e6c86c5e6bae1da01

  • SHA1

    99b8bb2922c95eb4c7619a939fc0f9d8dc055194

  • SHA256

    e2227a5138bd119b1df9d63aa53c6e618bb47b078f6657b71159b3b4145a195c

  • SHA512

    6d0f1e1417adba81179b17563e56bda0a263888053498ff39faca660ea5c768be3e8b4a611a10ebccb07d60a03d0a61540115ccf12c827956243556c2e58aaf8

  • SSDEEP

    3072:vnuGDNsBBINmUs1e14upC/FyaRaUfd24VYHMl03uNsT3GtTa5Sine3EE8uiu48vy:vdeBINmUumqzWL3uu3MTEymwqq/OdOTS

Score
3/10

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • R1049408055.zip
    .zip

    Password: lolo$2024

  • R1049408055.pdf
    .pdf

    Password: lolo$2024

    • https://api.dispap.co/gmsapi/fileToXml/?dp=075BB0000406664332ADCE78676DB5BD9CFEC358D3AD7A825DC6B868F8DCB15616C1A40F45E31EDCFB3A03D712228076FC0E6CFBA6F7BA19C4BCDCCBDC9DB82DE750B93C0E69FE750C56ACF79AB8FB95A8A2025A9A177DA0E6506524886325AE

    • http://tCTANOSwww.claro.com.co/negociosNacional

    • http://Claromiclaroapp.com.co

    • http://www.sic.gov.co

    • http://sic.gov.co

  • R1049408055.xml
    .xml