General
-
Target
LOGbinder SQL Report and Alert Specs.pdf
-
Size
1.2MB
-
MD5
e3fa8f99a8e1a1ba30cac2c9d1cb647e
-
SHA1
0666f69412af1cdb9458ccd5b9c588136a9d2e18
-
SHA256
aacfb0212ee6b04f8bda3730c8d3d95b33dae514c1a1b53a13edf079cbdb2bc5
-
SHA512
9fcff3d9543391fc69356e17b2141056393aaf6de7ff1159c9f3bd82bddaec2b0a7713766d8fa9fb2d2732a33da74a71638f6373b6f49f226bd5ce1b101f9df1
-
SSDEEP
24576:wpCf12o5681t6qhqP3Kf6ecFvYCqeZ1w9x8LwNzxLpHoIY+FKfD:UCQoQuo3xqeZ1w9wan5Y+w
Malware Config
Signatures
-
HTTP links in PDF interactive object 1 IoCs
Detects HTTP links in interactive objects within PDF files.
-
One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
Files
-
LOGbinder SQL Report and Alert Specs.pdf
Password: 1234
-
http://www.ultimatewindowssecurity.com/securitylog/encyclopedia
-
http://www.ultimatewindowssecurity.com/securitylog/encyclopedia/event.aspx?eventid=15
-
http://www.logbinder.com/PublicFiles/LbsqlEventList
-
http://www.ultimatewindowssecurity.com/sqlserver/auditpolicy/auditactiongroups/AUDIT_CHANGE_GROUP.aspx
-
http://UltimateWindowsSecurity.com
-
http://www.ultimatewindowssecurity.com/securitylog/encyclopedia/event.aspx?eventid=15.
-