93972851030980c8ab722ee882e4cce7 | Triage™

Sharing

Copy URL Twitter E-mail

Reason

office: invalid record header length

Reason

office: invalid record header length

General

Target
93972851030980c8ab722ee882e4cce7
Size 20.0MB
Sample240206-cvjessdba8
SHA256 19fdf48e152cb0e13871fac8e3f436da5675d4326911b38d1a882578e5e12391
MD5 93972851030980c8ab722ee882e4cce7
SHA1 3aad85b02eb858ead277b657760716b03b2ad644
SHA512 26aa7a1bc22e4d710fa77ec0b1f47c2515a48490e61e49daa385464c16e007ff7cb31b7a8eaa2f47a50983affb4c405adcc27899aaa361af75bd122ba1d6bebd
SSDEEP 393216:Aq/+DzwwWgIz8dYfigOfoQ6Z70gjagAxH0xfiFzSlZ+ftB3obXtjkU:F/s9WfQYLOfV6V0wNunklwTYbXdkU
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

pdf javascript link macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with macros.

resource
static1/unpack002/4031049fe402e8ba587583c08a25221a

PDF contains JavaScript
Detects presence of JavaScript in PDF files.
pdf javascript
PDF contains one or more embedded files
Detects presence of embedded files in PDF files.
pdf
Malformed data in PDF
A PDF can contain malformed data to evade detection
pdf

HTTP links in PDF interactive object 2 IoCs

Detects HTTP links in interactive objects within PDF files.

resource	yara_rule
static1/unpack001/sample	pdf_with_link_action
static1/unpack002/7b80f7ed7052405cdf6434ff5bc7c175	pdf_with_link_action

File Explorer

93972851030980c8ab722ee882e4cce7

.bz2 20.0MB
sample

.pdf .tar 26.5MB
001e2710555613a82e94156d3ed9c289

.pdf 262KB
pad.swf

26KB
004e74d54dcf79c641d5cf8a615488a0

.pdf 115KB
0106fb569e87e02fc88d496064abdf19

.pdf .js 22KB
02bfe34bea55e327cfdead9cff215f33

.pdf 155KB
1.swf

52KB
030423da29e1e6f4a527518126de4aeb

.pdf .js 4.0MB
03042cc3786dafdb941019488d4cad3e

.pdf 65KB
03546e59967af0c2dbf609013934cd07

286KB
04095314d51057a13e21908de1266fc1

.pdf 4KB
049675afd5c9505b9715872d499b9389

.pdf 1.3MB
0700bffe83561c1e2a5156d89de68f6d

60KB
0733c4e2122cdfcfdd4699a3cbdc8b40

.pdf 518KB
08da26158b76ca38e0ddb740aaf9b4ff

.pdf 26KB
0ab4a29af51b17335abbe0eb861784aa

231KB
0d711f2049a6004cffe447dab78cd7e5

.pdf 925KB
0e0c3a177b898c523e8303940ae99077

.pdf .js 17KB
0e1fc785eff45ff0b140dbf61abf3eab

818KB
0f24780097467c4c54f8f306346dff37

.pdf 2KB
0f5d42aa99b17eabddc19a46013b517b

.pdf 151KB
0fc9c4e1e2148912188dd913ff95149e

.pdf 4KB
100cf902ac31766f7d8a521eeb6f8d68

.pdf 216KB
10c35deb541e58b115ea2c682edb26ea

.pdf 146KB
10e15dd9b11528762c182b04f80e0a03

.pdf 129KB
116c4ad3656000b7c0908c13470d0001

.pdf 125KB
116d92f036f68d325068f3c7bbf1d535

.pdf 146KB
11dbb8d7924595e24c61eca8c9248834

.pdf 4KB
122ca0d4629ff12c3b0aa21bd18dbf08

.pdf 2KB
15a22ac5b7ed9fd640d6220dac0b4488

55KB
1618d09ff580014b251794222bb0f0f9

.pdf 521KB
17b67bd445c655598875e4c9a97ba906

.pdf 73KB
194030ef77514d3cad3b23d9fa3a0160

.pdf 9KB
1b2ff9edab6d5663842d6027b2819a86

.pdf 5KB
1dd08cf849277f10cc588718c137e77b

.pdf 15KB
1fd0cd90cbd69234d07b4172bbad754d

.pdf 111KB
21f05c819712e39a7a4d089b4f31e602

.pdf 3KB
21fa925e48a4238e22fef1147f293727

.rtf 63KB
22f3e7e6f64217628f97d09cdaa1810d

.pdf 38KB
230748c2bd16ba0213b73f0fd045169d

.pdf 6KB
231fc7f1300d2e6f94bccfaddbd98ea2

.pdf 11KB
238ecf8c0aee8bfd216cf3cad5d82448

.pdf 425KB
268a0065b6ea134054dc6aea300a830d

.pdf 9KB
26cb2016442b19af37d691ec46424aea

.pdf 54KB
27cd1443a07772e6e04207dd45537eae

.pdf 4KB
289d8bba31bb2e4455f3d28b74926c1d

.pdf 5KB
28f5ed6f32f3d9b800cf41c663b6c7f4

.chm 346KB
29db2fba7975a16dbc4f3c9606432ab2

.pdf 336KB
2aaa2f62cadf2b0f72587b3dffaee669

.pdf 85KB
2bbf014a1752d92b91e3452f9a235464

.pdf 4KB
2cd0e2c020f617ec1edc4ebd489da7e7

.pdf 2KB
2eea004842a335607b612ff10418f6c6

.rtf 237KB
2f846adf7a93e94a0a809eb32f188146

.pdf 4KB
307c2068b22b968a6bd0996e7c77f1ee

.pdf 74KB
33c1b7620ac827b26496534122e0cda6

.pdf 4KB
34d8b44ccdb7c1a6885c7d11c1d87be3

.pdf .js 5KB
350924123cbf1b126f4e38335ed6660d

.pdf 88KB
357d296be75e7e3988591d9123a01177

.pdf .js 8KB
36af296c3954274f4222847814b1f63b

.pdf 925KB
398fca0465861879284ef20f8e12e063

.pdf 8KB
3a67789dc523b6d083e8c4d652c7316a

.pdf 78KB
3abe00a1d0dc816a99587f574d02b498

.pdf 153KB
3bb77dde61188077ae6b23822f135df8

.pdf .js 17KB
3f57c3d98225d04e631c09d61adbb973

.xls 121KB
4031049fe402e8ba587583c08a25221a

.xls 105KB
4378bb2be0e41569bcce202f86e505f6

.pdf 38KB
43c2aad81665ddf0e585f50771a20582

.pdf 622KB
43cb55861b7fcf1dfb6968c9ef110bcc

.pdf 225KB
4407f42fa696c32ca473bead96e36aca

.pdf 350KB
44a23a54587581144b492579d67d742d

.pdf 4KB
49cfa73a76f04572d7c31f885045fa38

.pdf 4KB
4ae0c11a28edbdf132cf0eb8e823de74

.pdf 3KB
4afbc36385ed847a1a6f6a5618fb47c1

.pdf .js 37KB
4b2947d31e15ac41ea3bfd9f46f168d5

.pdf 2KB
4bb64c1da2f73da11f331a96d55d63e2

.xls 123KB
4f754a8ac2db2577a4ac0324985cd997

.pdf 73KB
4fcb63eee95e7bd64662c9330f3d62d4

.pdf 2KB
50b9bee0213917e52d32d82907234aeb

.pdf 220KB
511625f5fa0315b5a870029ae3338464

.pdf 58KB
51241d683dc9f24152bdd894658d72db

.pdf 307KB
51d3e2bd306495de50bfd0f2f4e19ae9

818KB
535abf5702d8f3de247b5103e31150f5

.pdf 73KB
536c0afe4d655a66dccad4af9679caa9

.pdf 126KB
538582c697d3bb59d408da61279ac75b

.pdf 4KB
53c39496579bcbda962d93734552397b

.pdf 67KB
53d54ffe118642102fe626649f9ffdba

.rtf 270KB
541e9691816fecdeb59204d92e846240

.pdf 4KB
54267a90492108fb4d0894553556c155

.rtf 107KB
554e71bfc718915135125752cf66dec2

.pdf 10KB
569607bf8315d9143fe3f7d424c3fda9

.pdf 22KB
56ae500c28dd85ac4d711b16e4f2125c

.pdf 7KB
575c2db4c26b05b862ebb60c5950f14c

.pdf 78KB
5766ba4473462485e15c4efdb243cb68

.pdf 10KB
576b214a1e5b6649f6677e20315a7ea9

.pdf 37KB
5800f546b535bd2b4e505b5c9be753ff

.doc 81KB
58d2c062fe278cd0e97964e7e6a0a3bb

.pdf 2KB
58de08c1155a775b760049dff3f5abe4

.pdf 113KB
595a9a9074e0845636a5b4c7bb1b157a

.pdf 10KB
5a0aac44ddaad1e512a0d505c217baff

.rtf 50KB
5b7541f3648cc440405179cb5c194644

.pdf 78KB
5bbdbec981b0708ea29edff2f8d78bcf

318KB
5c31ef69086467c073dde69cf3298555

.pdf 38KB
5cd2b97590afb82016aa56677cf0f42e

.pdf 74KB
61baabd6fc12e01ff73ceacc07c84f9a

.pdf 391KB
6227e1594775773a182e1b631db5f6bb

.pdf 132KB
63523effac8c0bf379ca6d69bb3227ad

.pdf 4KB
64f258918c1122b89468bb0ffbaff02d

.pdf .js 25KB
6634eacd3dae03be9767ac91b71decba

.doc 81KB
66753cadcb8bd537af50f2ae92d7627b

.pdf 114KB
6764488f739f9198381c056850bb6d9c

.pdf 20KB
67b19a04bdbd0adc3b39130a26331493

.pdf 174KB
67b4eaf0c10c4de37e094a6e7d09c8dc

.pdf .ps1 4KB
683b003e9ecfd3834a318fad65d39e34

.pdf 1.2MB
68fe3b0adfce215b95e55824913ff67d

.pdf 14KB
6932d141916cd95e3acaa3952c7596e4

.pdf 480KB
69e7de7b23acaff1e9417deedfae8b42

.pdf 991B
6b568dd640cb15a8994697adf9e7a399

.rtf 96KB
6e14c7a424c2eef7f37810ff65650837

.pdf 129KB
6f70e1815fe09fad9346a45b95eeb3e6

221KB
71803d893ed7d052fdb58f10da200fe9

818KB
719cf2bab291da52e495b86929b7ea7d

.pdf 417KB
721601bdbec57cb103a9717eeef0bfca

.pdf 262KB
722efe25f0d973fbb684cc32da1f693e

857KB
72d6d864205b0f1b32bbc9a7e5184ee7

.pdf 42KB
738af108a6edd46536492b1782589a04

.pdf 100KB
73fadb8f36e4f34a6d4719dc4ccbe666

516KB
745a347637b0603a76abbcb1e8277d1c

.pdf 7KB
757ead51fce397101a675d9bcca9d08f

.pdf 2KB
75d92097d4ae109aa5d199aa97e08569

.pdf 904KB
76f7e8dc68b364abfd893f0e9340fae8

.pdf 55KB
790b4a2c03086bd1917433a5084d2068

84KB
7b80f7ed7052405cdf6434ff5bc7c175

.pdf 205KB
7b9e1c1b479447506cc046a5d8219eca

.xls 163KB
7d6e9af1018c10f1b7dfa5169a35d941

.pdf 4KB
7f73dd439572409a64bc4dd0d603aacf

.pdf 150KB
7f7413bd2a4a0f001efd0305f4f56acf

.pdf .js 31KB
80202a9c51d8544bac7ac273428dd97c

79B
80f20af63314be2e8c79d8ca99eeb713

.pdf 4KB
82a5f96d1834411a3b5af9c21ffb14a8

.pdf 3KB
82a7c8fdacca91b1bd0fdc2407674f50

.pdf 183KB
82eeda4a754bf163d406e3e205df97e9

.pdf 204KB
83220f00d3b3cde40bd3bf58c78ba899

.pdf 10KB
853027bec65b3f2434788a70d4d15d89

.pdf 10KB
872537348b6f1ef77d74f1d298978d72

.pdf 10KB
896c14bc7ff88923e35aa824ab6c72da

525KB

93972851030980c8ab722ee882e4cce7

SHA256 19fdf48e152cb0e13871fac8e3f436da5675d4326911b38d1a882578e5e12391
MD5 93972851030980c8ab722ee882e4cce7
SHA1 3aad85b02eb858ead277b657760716b03b2ad644
SHA512 26aa7a1bc22e4d710fa77ec0b1f47c2515a48490e61e49daa385464c16e007ff7cb31b7a8eaa2f47a50983affb4c405adcc27899aaa361af75bd122ba1d6bebd
SSDEEP 393216:Aq/+DzwwWgIz8dYfigOfoQ6Z70gjagAxH0xfiFzSlZ+ftB3obXtjkU:F/s9WfQYLOfV6V0wNunklwTYbXdkU
MD5 SHA1 SHA512 SSDEEP