General
-
Target
eb7ce8f55a361ca0ba0c67ba8797a2d0_JaffaCakes118
-
Size
40KB
-
MD5
eb7ce8f55a361ca0ba0c67ba8797a2d0
-
SHA1
7ff05fced16a16a3d565758152679780665d3c0f
-
SHA256
b07bdbbb0dabdb52997beac7b61c3f81327989ebe0db44c3443fc7133a924f80
-
SHA512
d23983f50f319c9ff6182d4454e0bedad065779aa7715412a8693135b4999b6b4c32487edaa501762def65a4b177e3629f953c9de30a6f255b33d97aa9ac70c7
-
SSDEEP
768:lxRMU3FgGzpDnY152zyIdsyz1y4zyZ8yGcwZNds3uwKByjnygMyA8yt1yrxyyny1:lgGFQZVVP9uGr8rbXQ0Lr1/T6S
Malware Config
Signatures
-
HTTP links in PDF interactive object 1 IoCs
Detects HTTP links in interactive objects within PDF files.
-
One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
Files
-
eb7ce8f55a361ca0ba0c67ba8797a2d0_JaffaCakes118
-
https://ttraff.link/123?keyword=pakistan+railway+application+form+2020+download+pdf
-
https://cdn.shopify.com/s/files/1/0482/3180/9176/files/59638776531.pdf
-
https://cdn.shopify.com/s/files/1/0496/1825/6035/files/carson_newman_baseball_division.pdf
-
https://cdn.shopify.com/s/files/1/0439/2094/9403/files/frp_bypass_apk_android_7.1.2.pdf
-
https://cdn.shopify.com/s/files/1/0437/9279/3757/files/texinemogezakiro.pdf
-
https://cdn.shopify.com/s/files/1/0499/8361/9232/files/general_anaesthetic_drugs.pdf
-
https://wepugimi.weebly.com/uploads/1/3/1/0/131070973/purom.pdf
-
https://genigudepa.weebly.com/uploads/1/3/1/0/131070712/6023986.pdf
-
https://uploads.strikinglycdn.com/files/30655eeb-3738-48f6-8973-1225a71df805/somemilafore.pdf
- Show all
-