General
-
Target
12798f9f9f2afb8937ad6732a7be0f78_JaffaCakes118
-
Size
70KB
-
MD5
12798f9f9f2afb8937ad6732a7be0f78
-
SHA1
4736619ba3a7647b9ea0ded533eb6bd0a8310f67
-
SHA256
306011339eb20715e847dfa70c79843d9c5f7fa40c3bca5f779f041abf15626c
-
SHA512
7dd4d04414c854ccffe4454df12f91098b38b9093fdc3642454c681c27963a9b6e07dcc7d496f4ca5724267392bf30a08675209e0afa46c6e26dfb869cb68c0f
-
SSDEEP
1536:3XFZmGWSkS8Tb2Sgtcb14ryKELW2sFJ+S6PsJOwWSJMFlow6M:nysjKJ4rdH2stcMJMboU
Malware Config
Signatures
-
One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
Files
-
12798f9f9f2afb8937ad6732a7be0f78_JaffaCakes118
-
http://backourblue-westrichland.com/uploads/1/3/0/8/130873710/9e40b4f5ff0.pdf
-
http://destinationsbydawn.org/uploads/1/3/0/4/130491418/ce6c113d6e.pdf
-
http://girlslikeme.net/uploads/1/3/1/3/131384256/wimozudodo.pdf
-
http://nooracademyonline.com/uploads/1/3/1/0/131070071/piruxebe_guzewiruzepa_mupixamusafapoz_bodigakepidigi.pdf
-
http://wellingtonproject.org/uploads/1/3/0/8/130814187/gibemevizibo_velosezuvaro_riwupoti.pdf
-
http://woodlandstuition.com/uploads/1/3/0/8/130874073/130874073.html#rapid+sequence+intubation+drugs+pediatrics
-