General
-
Target
fb30ff8d6eb7129982320276e4e7d28a_JaffaCakes118
-
Size
88KB
-
MD5
fb30ff8d6eb7129982320276e4e7d28a
-
SHA1
89b624571ef730ba5ebc24f42d1ef1b3985cc1b8
-
SHA256
58ac33d3eb4c2b6682ae917908271b23cefd0c6cc3e04c2b4851bf6b63936de5
-
SHA512
0d3929de928863aa3b312d633a61ed50a7c38f753e7f38b01a9cde464b4222d6128728a7af735d6182c4e18a9983b1ad62466d2d11602f2847691dddb92db967
-
SSDEEP
1536:I7eLshClpwUbOojlIXdgbbz+erwwZh62GsYls+W/8EpVW7hClOTZWbpONaZbv:1THJ4WbbCQXZoaHMhoOTbNE
Malware Config
Signatures
-
One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
Files
-
fb30ff8d6eb7129982320276e4e7d28a_JaffaCakes118
-
https://feedproxy.google.com/~r/skout/mBVl/~3/cv9VXjIrmdE/uplcv?utm_term=the+rainy+day+poem+answers
-
http://www.gaviprintpack.com/wp-content/plugins/formcraft/file-upload/server/content/files/160b89a4d7f2f0---75415299070.pdf
-
http://bergfin.se/wp-content/plugins/formcraft/file-upload/server/content/files/160b980f340131---13713285002.pdf
-
https://balance-global.com/wp-content/plugins/super-forms/uploads/php/files/vl82li8m82a0i8jutq1l0558ic/56656306636.pdf
-
https://afriqueitnews.com/wp-content/plugins/super-forms/uploads/php/files/171b89c63d640498040707436f3eac49/duvinamazaluginerivuxikun.pdf
-
https://www.chauffeur-prive-nice.fr/wp-content/plugins/formcraft/file-upload/server/content/files/160c76b0bb2abf---31543508270.pdf
-
http://www.icodar.com/wp-content/plugins/formcraft/file-upload/server/content/files/1607a5763811cf---34524894637.pdf
-
http://www.1000ena.com/wp-content/plugins/formcraft/file-upload/server/content/files/160a2275a73fd0---85323544978.pdf
-
https://regalcabs.co.uk/wp-content/plugins/formcraft/file-upload/server/content/files/160a31cbfbf3dd---volelanudim.pdf
- Show all
-