US8000038278 - GOP - 4[.]22[.]2024[.]pdf | Triage

Sharing

General

Target

US8000038278 - GOP - 4.22.2024.pdf
Size

126KB
MD5

aedb0244cb5682d96211da2d501f2ddf
SHA1

d06075e00987c52d640a46a4b51cd2d10c2ad837
SHA256

d3dae03f33646171dd03bc94acc343342f7208312c8af063bc096cc2814630e6
SHA512

08dfaf709f8ac6c6eb138ad5e12a03018c835962d539d86c7b3afe0e3d901716d1d81ac4547d562a1d325a253705544fc1645fe9a60aa3aac4e54454dd1ba88b
SSDEEP

3072:GIqrA209KlmRfREQ396i6zuOt9TZa6uJ0DKmnQOg:GIqk98mTEQkucQ6tGmnQB

Score

4^/10

pdf link

Malware Config

Signatures

HTTP links in PDF interactive object 1 IoCs
Detects HTTP links in interactive objects within PDF files.
pdf link

Processes:

resource yara_rule

sample pdf_with_link_action
One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
pdf link

Files

US8000038278 - GOP - 4.22.2024.pdf
.pdf
- http://www.falckglobalassistance.com/
- http://providencehealth.bc.ca