Overview

overview

3

Static

static

3

0fc4e3f688...18.pdf

windows7-x64

1

0fc4e3f688...18.pdf

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    0fc4e3f688b6393471daadd36afa54f6_JaffaCakes118

  • Size

    367KB

  • MD5

    0fc4e3f688b6393471daadd36afa54f6

  • SHA1

    4a8d233d4375722245038e4d7afb0337b92b5b18

  • SHA256

    19c34e1244769aeb944713f4ac8d71e7a40bd3fbacec262602e4fba82b673da3

  • SHA512

    6490157e758edb9eaa6863be01a15d318581f586022509955ca90751f34292206f70077214071aaec77e078e4df9d2633b6799fed1ce3d19d5967015267b3abc

  • SSDEEP

    6144:omDeef2/VXvi+5Nwy+C60xbIffvFj1SeuK8ytyaMw8f3B4wTnEnfQ0tRONRRdQbT:orXvjd+x0qtjnuK8GRaB4+2Q0tWCbKVq

Score
3/10
pdflink

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

    pdflink

Files

  • 0fc4e3f688b6393471daadd36afa54f6_JaffaCakes118
    .pdf

    • http://botcraftman.ru/?lip&keyword=surgeon+simulator+2013+meet+the+medic+%D1%81%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C+%D1%82%D0%BE%D1%80%D1%80%D0%B5%D0%BD%D1%82&charset=utf-8

    • http://img0.liveinternet.ru/images/attach/c/7//4752/4752179_programma__provedeniya__pervichnogo_.pdf

    • http://img0.liveinternet.ru/images/attach/c/7//4752/4752244_kod__aktivacii__dlya_.pdf

    • http://img1.liveinternet.ru/images/attach/c/7//4751/4751729_powerpoint__2010__skachat_.pdf