General
-
Target
f07d435a718f9880516eef60a5f39d8a_JaffaCakes118
-
Size
82KB
-
MD5
f07d435a718f9880516eef60a5f39d8a
-
SHA1
2e047225930daac9b96c23ee793254916d2d0161
-
SHA256
da74777182122912ba5ba079fbd998dca7ea89f59e7a8b42c3be128518d5a785
-
SHA512
fc9d3bc40c715d3a4b496470d8ca10dafbf8e275ea527aeefbf7464d947efdb8cf9c5821ab283e2f206411268b61d255dd9de962258e827c42e3bd9b329be2f0
-
SSDEEP
1536:jO6CVSWQgzO/pG7+XSWy0O7QYfnDzW7SmizJtSAHYJwUHcWgpOG7KrbWBjXc8FIA:lxgq/pgSLZ2fOGmizJtrHsrGYoTc8B
Malware Config
Signatures
-
One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
Files
-
f07d435a718f9880516eef60a5f39d8a_JaffaCakes118
-
https://feedproxy.google.com/~r/skout/mBVl/~3/ngfLrbzwjls/uplcv?utm_term=song+past+tense
-
http://kaufdeinauto.de/wp-content/plugins/formcraft/file-upload/server/content/files/1607145ed5e0ed---fawetugizopo.pdf
-
http://alvasari.com/wp-content/plugins/formcraft/file-upload/server/content/files/160a60c1730ec1---59056135015.pdf
-
http://pansophers.com/wp-content/plugins/formcraft/file-upload/server/content/files/16094497f734ad---zedoxinegobabiwerexokodo.pdf
-
http://www.inhd.com.br/wp-content/plugins/formcraft/file-upload/server/content/files/160c2a957f3a84---11644612828.pdf
-
https://cutletsmeat.com/wp-content/plugins/formcraft/file-upload/server/content/files/16085673f38eb5---wowazivobuwafa.pdf
-
http://www.dramayaramendes.com.br/wp-content/plugins/formcraft/file-upload/server/content/files/1606c834a14188---55569326846.pdf
-
https://www.hontoys.com.au/wp-content/plugins/super-forms/uploads/php/files/dcg4ums3uqllu3amgh4070t9v4/94679811744.pdf
-
https://www.businesswatchguardingservices.co.uk/wp-content/plugins/super-forms/uploads/php/files/4fnuqt2pgbvelij7q7cknh0g8d/rikomozowedejiw.pdf
- Show all
-