Behavioral task
behavioral1
Sample
entry_1_0/LLA Commercial - Chaiiwala- Pre-Start Meeting Minutes - 28.03.24.pdf
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
entry_1_0/LLA Commercial - Chaiiwala- Pre-Start Meeting Minutes - 28.03.24.pdf
Resource
win10v2004-20240412-en
General
-
Target
file_80341cfe6db1467593a7982ee83f9c59_2024-04-17_12_14_48_242000.zip
-
Size
1.2MB
-
MD5
d2ffaf03bd88f586de010a454622a920
-
SHA1
d6e131567f6a6f545a551e741c5e0e6905a615e0
-
SHA256
ee0d5f084fbb37a315ef72835a9d4816b4f7b3b17af1486d421dd723fbe87a0e
-
SHA512
f73855469f2f6aa0f54351526d42b43b85ac9a8e1c67c9115447465e6563c581a5e1cdd0af81af84580a5bb0848f31d7474c33e2d0bf558aa4ae59e4dba72cbb
-
SSDEEP
24576:pFey91AXCpyO6jOrAQdnpmap0I3xndEN6hXT:3egvAhjOrA+p3eIpWNY
Malware Config
Signatures
-
HTTP links in PDF interactive object 1 IoCs
Detects HTTP links in interactive objects within PDF files.
resource yara_rule static1/unpack001/entry_1_0/LLA Commercial - Chaiiwala- Pre-Start Meeting Minutes - 28.03.24.pdf pdf_with_link_action
Files
-
file_80341cfe6db1467593a7982ee83f9c59_2024-04-17_12_14_48_242000.zip.zip
-
entry_1_0/LLA Commercial - Chaiiwala- Pre-Start Meeting Minutes - 28.03.24.pdf.pdf
-
https://lla.info-exchange.com/CheckIn
-
https://lla.info-exchange.com/CheckOut
-
https://lla.info-exchange.com/CheckInen-GB
-
https://lla.info-exchange.com/CheckOuten-GB
-
-
manifest.json