Behavioral task
behavioral1
Sample
14b83bcc69252eda46748107cfb8498d081b6adb2dd0b7b16282cdfe0ab53718.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
14b83bcc69252eda46748107cfb8498d081b6adb2dd0b7b16282cdfe0ab53718.pdf
Resource
win10v2004-20240508-en
General
-
Target
14b83bcc69252eda46748107cfb8498d081b6adb2dd0b7b16282cdfe0ab53718.zip
-
Size
91KB
-
MD5
f90e536b667036b42b4af9183f799bd8
-
SHA1
475daf32fc82e834eb14600fbb804fbb3531149b
-
SHA256
bc089c54c2c526d1601e46e9b844c799bfa8c7639b05b14dd47868c7602f5adc
-
SHA512
b8c2bb9907699d4eef1e818ad8ebbcc461cc2e4a641ff05445fc58c8248df589d74a27db04eaaaddcf5ac427c610aa8a3f5ac668c7e993f4ca248c6a5196ea4d
-
SSDEEP
1536:FEVXDre/VrLnTtGf6vQkkAXdl5LaQFwdmcAH8YprDWMNIo6IEyvIQeTt9j+TRZZ/:FExi/VkivQrAH5LbTHcYp/WMV6jt1Yl
Malware Config
Signatures
-
HTTP links in PDF interactive object 1 IoCs
Detects HTTP links in interactive objects within PDF files.
resource yara_rule static1/unpack001/14b83bcc69252eda46748107cfb8498d081b6adb2dd0b7b16282cdfe0ab53718.sample pdf_with_link_action
Files
-
14b83bcc69252eda46748107cfb8498d081b6adb2dd0b7b16282cdfe0ab53718.zip.zip
Password: infected
-
14b83bcc69252eda46748107cfb8498d081b6adb2dd0b7b16282cdfe0ab53718.sample.pdf
-
https://dgv.oldentra.ru/4bw6nDO/
-