General
-
Target
f412fecbd2a626ecd5f822f34c531b00_JaffaCakes118
-
Size
83KB
-
MD5
f412fecbd2a626ecd5f822f34c531b00
-
SHA1
d624821646640e85687a13842cfc5924efff26fe
-
SHA256
e25b4dd2b96858b6ce56653285954bced4fa6fe3a7ec565a66596264883f0e26
-
SHA512
dc4c86b6bc0b427283796dd95573f36e191d540e61c6dd119c895b3dc0d44ea8e486a3f9ca2c8250edbf104902ba05b61f54262416b4cd04efc1f9f58392acec
-
SSDEEP
1536:4WiqPuqZVnDA5Mjw95Pm/N9n8Vgq/oFUqw5wEG2JfVWLur0LcEaGWOpOaZyp2:RiqZW5Mc95PAN98eq/gEwScY7aZb
Malware Config
Signatures
-
One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
Files
-
f412fecbd2a626ecd5f822f34c531b00_JaffaCakes118
-
https://feedproxy.google.com/~r/1eyvgo/aqOO/~3/Om9ozkHLxGw/uplcv?utm_term=difficult+words+pdf
-
https://israelonthehouse.com/wp-content/plugins/formcraft/file-upload/server/content/files/160b2274aa855c---26241882459.pdf
-
http://www.birapart.com/wp-content/plugins/formcraft/file-upload/server/content/files/1606fcbd08d662---wajijudem.pdf
-
http://bjbtrh.com/files/pic/file/vigepobivumujajuxozid.pdf
-
https://nscs.org/wp-content/plugins/super-forms/uploads/php/files/24bd67c8a18d72b0107c716253751961/widilarabuto.pdf
-
http://franzoesischebulldoggen.eu/userfiles/file/kogoferugajekeg.pdf
-
http://interwork.sk/userfiles/file/wifuwul.pdf
-
http://northphoenixmustangs66.com/clients/4/4b/4b49b54eec06ebba3741256e9f3e6f2b/File/nanon.pdf
-
http://rchs1964.com/clients/5/58/580abc73d3aac4ea3a2bdd7c75327783/File/6577392164.pdf
- Show all
-