Resubmissions

24/01/2024, 13:45

240124-q2lqdsbgfq 4

24/01/2024, 13:45

240124-q2lemabgfp 4

24/01/2024, 13:31

240124-qsf4jsbear 4

General

  • Target

    e49c56f615bf54e96edd2b44939453be38c93ba75ed1b66bee00bf0a0f167b56.pdf

  • Size

    358KB

  • MD5

    30e35f1cd1885ff0eb1bf8a4d59eb489

  • SHA1

    be129e9e2b3f45ad2e3c6218ef58bf3a0580dfc6

  • SHA256

    e49c56f615bf54e96edd2b44939453be38c93ba75ed1b66bee00bf0a0f167b56

  • SHA512

    4674b45a9981b42eef3cf574697289ff6ca43d8ef1196ab4050268a0bcb6ab9d1dc47bc8feaaaaf2e2ffccba713376a15b876cb2bc892aaab11ae537e54b1494

  • SSDEEP

    3072:amDdqM4vKjI6bxUI9bhqqThvVaohpocezuMVGR11ByMSMkGmFLzhI9ja9aSydagQ:aMpI6bxpxhv7IdFLzUjo0a58x1Yx

Score
4/10

Malware Config

Signatures

  • HTTP links in PDF interactive object 1 IoCs

    Detects HTTP links in interactive objects within PDF files.

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • e49c56f615bf54e96edd2b44939453be38c93ba75ed1b66bee00bf0a0f167b56.pdf
    .pdf
    • http://www.baur.de/

    • http://www.de.personalshop.com/

    • http://www.mediashop.tv/de

    • http://www.quelle.de/

    • http://www.shop.frankfurt-airport.com/

    • http://www.shop.retoura.de/

    • http://www.tchibo.de/

    • http://www.vorteilshop.com/

    • http://www.kfzteile24.de/

    • Show all