General

  • Target

    400comandos.pdf

  • Size

    171KB

  • MD5

    5bc42e5c0839dd3016b4b0968dbfcefa

  • SHA1

    41c9465db923b55b4e750e804842aee07a84484f

  • SHA256

    44c37289690f00eb211be59074720c8aa4175813720819fd3b277cb4da14686e

  • SHA512

    46ddfa19925caadf9fafcaca2d5f03c300dbe0d6bea2395335b365afab208d600cc4dbd32a345b93b3ecae47bfdac74082fcfe233561535ed2e3a2e3ee492fb4

  • SSDEEP

    3072:TugHZHDxxH4BgjjtMZWVSfG3mqoe38N50nCu0WjIOoiaRvc8v:TumFDxqB2jtfsG3XrsNGB0GVo9v

Score
4/10

Malware Config

Signatures

  • HTTP links in PDF interactive object 1 IoCs

    Detects HTTP links in interactive objects within PDF files.

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • 400comandos.pdf
    .pdf
    • https://gutl.jovenclub.cu/wiki/doku.php?id=/comandos/inicio#fn__1

    • https://gutl.jovenclub.cu/wiki/doku.php?id=/comandos/inicio

    • https://gutl.jovenclub.cu/wiki/doku.php?id=/comandos/inicio#fnt__3

    • https://gutl.jovenclub.cu/wiki/doku.php?id=/comandos/inicio#fnt__2

    • https://gutl.jovenclub.cu/wiki/doku.php?id=/comandos/inicio#fnt__1

    • https://gutl.jovenclub.cu/wiki/doku.php?id=/comandos/inicio#fn__3

    • https://gutl.jovenclub.cu/wiki/doku.php?id=/comandos/inicio#fn__2