General

  • Target

    MDE_File_Sample_03296db634fa2c8ec526a19b6b2fa7041cc8313d.zip

  • Size

    32KB

  • MD5

    90bb7ba3d2159fa74cb6e8047e0bfa39

  • SHA1

    16bafbc62a0bb6291434207f433bce306eb34599

  • SHA256

    a1bd9ebbab989b14bfc3f8a6138aa841edd2e834cae746efa6ee5245fe3d7fc6

  • SHA512

    f184fc325242edcf51d9d20180583a492e631588dca9b737299634d888c95342c3c872efca5489883f3d5a314103e83a0ed0579464f08220712007e7c63c7bb1

  • SSDEEP

    768:cWrnZmoxqxdx7OEs9qEckbrNZoFMHk0RBA39k6Z3QTDh:5rnwIDuMEvt/Q3h

Score
4/10

Malware Config

Signatures

  • HTTP links in PDF interactive object 1 IoCs

    Detects HTTP links in interactive objects within PDF files.

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • MDE_File_Sample_03296db634fa2c8ec526a19b6b2fa7041cc8313d.zip
    .zip

    Password: novirus

  • 4-16-2024 groundedelec (002).pdf
    .pdf

    Password: novirus

    • https://ipfs.chainsafe.io/ipfs/QmQMFTberit9sHzRyyLAiiZXGkiavPz3RGYru5Ethvpb51#