General

  • Target

    d22d6a7e94f2a9cdafb6b0ecd53b591bdbff097522af694158c2fab05d86cc76

  • Size

    261KB

  • MD5

    215ee70f9a88e4bac6509fa6a05b5e9c

  • SHA1

    a37a96181a9ac3b3b8238a32d85d14b7672c5d5c

  • SHA256

    d22d6a7e94f2a9cdafb6b0ecd53b591bdbff097522af694158c2fab05d86cc76

  • SHA512

    b37eaf061461b57365da84a36bbf4942afecd4fc0804eadd54e37f1aeb8525574779061316961bfc758f564b43ae4bf8a12170df6c390be454f5585a372d52a9

  • SSDEEP

    6144:13DboephHYD3ikk+M2nwJxqOhBKZuKBN104DfA/nGCb:5vdphHankr2K5LR+104DI/GCb

Score
3/10

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • d22d6a7e94f2a9cdafb6b0ecd53b591bdbff097522af694158c2fab05d86cc76
    .pdf
    • https://www.outsidethebox.ms/

    • https://www.outsidethebox.ms/category/popular/

    • https://www.outsidethebox.ms/category/windows/

    • https://t.me/winitpro_ru

    • https://winitpro.ru/index.php/2016/07/28/zapusk-provodnika-windows-ot-imeni-administratora/

    • https://www.outsidethebox.ms/12317/

    • https://devblogs.microsoft.com/oldnewthing/20220524-00/?p=106682

    • https://pdfcrowd.com/api/?ref=pdf

    • https://pdfcrowd.com/html-to-pdf/?ref=pdf

    • Show all