General
-
Target
dd9c587e92170085838a0a562bdc4515_JaffaCakes118
-
Size
77KB
-
MD5
dd9c587e92170085838a0a562bdc4515
-
SHA1
f8192e24a875a89c8f086e8fcc6df7d484cf8b8b
-
SHA256
c691932ab72c0f78261a79166fef86b1cac65a6b611153ea8aee8c7167655147
-
SHA512
25b873a993513999122cba88d1fd8049bf425a3bc06f07c53a568500d71223611a15df444c45dc12ce16f8e69b813cf9352c8cd8a2dcceb55141aa55f0a55cbf
-
SSDEEP
1536:6QD9sz9vWXB+5X8SLD7Hczx2WhH5PliPvpnvVPzLalgfjuAP/wDcQ/njy0:Thi9vGoD7Hc12mi5nvVPz+lGiAgcmjB
Malware Config
Signatures
-
One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
Files
-
dd9c587e92170085838a0a562bdc4515_JaffaCakes118
-
https://medvor.ru/uplcv?utm_term=armed+heist+mod
-
http://www.kreasoft.mx/wp-content/plugins/formcraft/file-upload/server/content/files/160891288eb9e9---70697682240.pdf
-
https://namratalakhotia.com/userfiles/files/58094238404.pdf
-
http://zadonskiy.ru/wp-content/plugins/formcraft/file-upload/server/content/files/16078d68d09796---95760150992.pdf
-
https://f1com.ge/wp-content/plugins/super-forms/uploads/php/files/850f16e8eaa6b5e8b212627216005ad9/2196262024.pdf
-
http://ipvoicenj.com/wp-content/plugins/formcraft/file-upload/server/content/files/160a4694b5f0eb---netijebimafamakuma.pdf
-
https://hightechrustremovers.nl/wp-content/plugins/formcraft/file-upload/server/content/files/16078b6f4c3457---17139089482.pdf
-
https://growmytruck.com/wp-content/plugins/super-forms/uploads/php/files/1fc0536133ec5cec6366ff78c64d66ef/51863936042.pdf
-
https://sportli.co.il/wp-content/plugins/formcraft/file-upload/server/content/files/160756a6eb5474---99276919839.pdf
- Show all
-