General
-
Target
Saic_Ncontracts_Timesheet_from_Payroll_Management_LLC.pdf
-
Size
46KB
-
MD5
ce88548844059a13147ef6f2120dac1d
-
SHA1
ac20b005216b70466025d163d3e1f4e96dc8e38e
-
SHA256
03dea1da3ca9ecf7fd8c70c8934d5380d5f74235f3266f9eaeee3d14e1811a29
-
SHA512
cbffb2ec3b4ae3344aab88bd1b0ad3f9339932774af272e3bc7f1db75064b1d86f0bf5dd22ce7c14d6ed430847249957fea65a21ad6216b76dfa51fcd3ff988a
-
SSDEEP
768:yMSjGCkHEKVTThgQW6Liz0SffaCd1S5sd0hRIbrLjKbIZNh9d8v7SdilXHCsydAN:wvKlNgQziAC4PRsN2LlXXCn8y+ZP
Malware Config
Signatures
-
HTTP links in PDF interactive object 1 IoCs
Detects HTTP links in interactive objects within PDF files.
-
One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
Files
-
Saic_Ncontracts_Timesheet_from_Payroll_Management_LLC.pdf
-
http://www.kubved.ru/bitrix/rk.php?id=93&site_id=s1&event1=banner&event2=click&event3=1+/+%5b93%5d+%5bright_bottom_bottom_1_180%5d+%D0%BF%D0%B8%D0%B2%D0%BE+%D1%81%D0%BE%D1%87%D0%B8+2017&goto=https://thefirstprop.com/ind//SQDccQ/YWxpc2hhLnIuYXNiZWxsQHNhaWMuY29t
-
https://aka.ms/privacy
-
https://eficensitcom-my.sharepoint.com/:x:/r/personal/payroll_eficensit_com/Documents/E%20workings/Epic%20list.xlsx?d=w389e80b448cb484aa2ba1206ea469667&e=4%3abd4c6dd8ed24488eb3a366ccfc7b3a93&sharingv2=true&fromShare=true&at=9
-