General

  • Target

    f0e10b8ac201fc624f50deb603c313e0_JaffaCakes118

  • Size

    161KB

  • MD5

    f0e10b8ac201fc624f50deb603c313e0

  • SHA1

    9ec8c5bafdae204404828370a2b7902f17c4bfeb

  • SHA256

    ab2de4fde6b3cac111ed0732ca0cb29e5b2024bad549292b75c3be4524f21aa4

  • SHA512

    f09324e0dac577e84504e5fec15463c9710591d3ed0e967dac6d66ad22a49549485cb8ed293cfd1cf9b88dd1be77894b089105275780d0eaf13653ea4103c018

  • SSDEEP

    3072:vEv9ksypVCKcqM5OMDf2UkBS6UtGMvCe/vXVSNynWck1lZ66rGmA:IoCNqefDf2U56UdrvFVQfQ

Score
3/10

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • f0e10b8ac201fc624f50deb603c313e0_JaffaCakes118
    .pdf
    • https://feedproxy.google.com/~r/skout/mBVl/~3/3vuEKuznOb8/uplcv?utm_term=takes+a+ride+nyt+crossword

    • https://aldea.work/wp-content/plugins/super-forms/uploads/php/files/10ebf6fde1ca4704e215896675c3a681/wolowixegire.pdf

    • http://dfh-consulting.com/userfiles/file/jenixelaga.pdf

    • http://www.hj-bouwt.be/wp-content/plugins/formcraft/file-upload/server/content/files/160949a09ee4a5---46919811944.pdf

    • https://victory-agency.com/wp-content/plugins/formcraft/file-upload/server/content/files/160afa65c43f3e---berasixijobujit.pdf

    • http://adams-gold.ru/archive/image/file/laxuwagadezufedirej.pdf

    • http://nuyewrecruitment.com/wp-content/plugins/super-forms/uploads/php/files/8f0e1f03ae201f751172c4e2e31a984d/68091755213.pdf

    • https://totalyoumovement.com/wp-content/plugins/formcraft/file-upload/server/content/files/1608b2d90d800c---liwawitapepa.pdf

    • https://nceptionsolutions.com/wp-content/plugins/super-forms/uploads/php/files/c35b69cd0a41c8df3dd9dd6ccded6dd6/95929046173.pdf

    • Show all