General
-
Target
0dfecb6d053c1b203de7ced2c094a14a_JaffaCakes118
-
Size
83KB
-
MD5
0dfecb6d053c1b203de7ced2c094a14a
-
SHA1
e1c4d34a63e6465a961072c4868609c759249384
-
SHA256
dacbd4b4f87aa9508a0010ad9e527f5134100a5a52d54eda9ce9258a81249954
-
SHA512
09c0970e6ddd288c77900a0bdd6488e2816493d983a199d6c0303d18645484d64f4138d9b7b81fa0d4410e712abc1e615b01d3b24db6415a8f8a608deb5d7f4e
-
SSDEEP
1536:zc1dW5Q2cTMQNOyZP+nqNlY4F/hAGCULGlHI6tStAQJIZUV4P45yLCHUjj:Y1dcZZQNOyZP+nqA4loULdAStA7ZUmgK
Malware Config
Signatures
-
One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
Files
-
0dfecb6d053c1b203de7ced2c094a14a_JaffaCakes118
-
https://medvor.ru/uplcv?utm_term=cash+for+app+mod+apk
-
https://intelean.com/wp-content/plugins/formcraft/file-upload/server/content/files/160a31550ebc29---23955649705.pdf
-
http://www.gaviprintpack.com/wp-content/plugins/formcraft/file-upload/server/content/files/1607e212c821c6---xogez.pdf
-
http://aksaxena.com/bpms/includes/fckeditor_uploads/userfiles/file/93923678628.pdf
-
http://airconbank.com/upload/fckeditor/file/73511136073.pdf
-
http://www.hotel-margherita.com/wp-content/plugins/formcraft/file-upload/server/content/files/1607d5a8c87e8d---75826624456.pdf
-
http://xperion.hu/wp-content/plugins/super-forms/uploads/php/files/dc105913a5a8e532e5bada9b89216a57/87034646840.pdf
-
https://hmv.ir/wp-content/plugins/formcraft/file-upload/server/content/files/1607ad5bfd90ff---pafasoduseri.pdf
-
https://www.superioreagle.com/wp-content/plugins/formcraft/file-upload/server/content/files/160bc5c9fdbb8d---xuvitimaroletuxumefate.pdf
- Show all
-