General

  • Target

    1f9068f5681e63f206e3c7615f7c5c19_JaffaCakes118

  • Size

    363KB

  • MD5

    1f9068f5681e63f206e3c7615f7c5c19

  • SHA1

    61f0d91046cb9b094627ce21cfacf518f1a6bbc8

  • SHA256

    9553cd08b80722ce2b1a42ab0a8d0a1342dea974805cd14d545689b50bfd8d11

  • SHA512

    0fe3b04338cad488990de6d70aa8b09ae1a881df0991cafe7744739bbb9fe0423c3785e74cf2d0aaa340fe0ae96e545153713263a7887c9fe44076fc73267a98

  • SSDEEP

    6144:ICkJ22SHLrUWISKnCqe/OY+EWBGDthpDtClyBASaNVcYIfXIyHuMYnQDfK:DQ2znUWHE3BCtPDtC8BUVcRfXUMmQDC

Score
3/10

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • 1f9068f5681e63f206e3c7615f7c5c19_JaffaCakes118
    .pdf
    • http://botcraftman.ru/?lip&keyword=%D0%9A%D0%BE%D0%BD%D1%81%D1%82%D1%80%D1%83%D0%BA%D1%82%D0%BE%D1%80+%D0%BC%D1%83%D0%BB%D1%8C%D1%82%D1%84%D0%B8%D0%BB%D1%8C%D0%BC%D0%BE%D0%B2+%D0%BC%D1%83%D0%BB%D1%8C%D1%82%D0%B8-%D0%BF%D1%83%D0%BB%D1%8C%D1%82%D0%B8+%D1%81%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C&charset=utf-8

    • http://img0.liveinternet.ru/images/attach/c/7//4802/4802903_stalker__dezertir__2_.pdf

    • http://img1.liveinternet.ru/images/attach/c/7//4803/4803349_programmuy__dlya_.pdf

    • http://img1.liveinternet.ru/images/attach/c/7//4803/4803719_kalkulyator__fyuzov__avr_.pdf