Behavioral task
behavioral1
Sample
f2a975e7d8bb153e68955e35c20459b702c5ea69188f7d40f22834de4f54be88.pdf
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
f2a975e7d8bb153e68955e35c20459b702c5ea69188f7d40f22834de4f54be88.pdf
Resource
win10v2004-20231215-en
General
-
Target
15368856924.zip
-
Size
662KB
-
MD5
587fe95cbb0c0920063a04c385ccd0cc
-
SHA1
7f4dc59437671997261d6ea6685ed1110d5dc169
-
SHA256
143f7c9f698e2ba94cd31fd98997680224f8655410e344ba314d8c0a5b9b0af7
-
SHA512
b8670e88b56b78057ef55f15539e68bbc2e75a4755e3b6e068afef5863f8c4eddb9b5e7358f6cfab78ac37d93b1765ddab0cd1589a83d070ade42c0fa5d0636a
-
SSDEEP
12288:Ymu9Qdc1vh40PzEpDyEHKNQmkeoGgUEbuoaUUa4P0yOsc4LczOm/If:xdc1p4nDy6mnyD7UDVOv4LcamW
Malware Config
Signatures
-
HTTP links in PDF interactive object 1 IoCs
Detects HTTP links in interactive objects within PDF files.
resource yara_rule static1/unpack001/f2a975e7d8bb153e68955e35c20459b702c5ea69188f7d40f22834de4f54be88 pdf_with_link_action
Files
-
15368856924.zip.zip
Password: infected
-
f2a975e7d8bb153e68955e35c20459b702c5ea69188f7d40f22834de4f54be88.pdf
Password: infected
-
https://bit.ly/3STvWXu
-