Approval Disclosure[.]7z

General

Target

Approval Disclosure.7z
Size

91KB
MD5

48a7dfbf542a2d54cb42674bb3976214
SHA1

04e9beac41ca7164958b8023809fc8d74e0bd932
SHA256

87f0f9096ca27b3543dbb977f39e1e1339ecd8da645ebba69e5455e6674076c0
SHA512

cc7626fc081e7c3c525e10e17bca18a7a23e960478b6084cb8d9f30c6242282fef6678d40f4d04a9100f17a10a63e5b8fe6cbcd2697596ed6906a87313a5c58d
SSDEEP

1536:XMehLCLpAr2bHHJ5+FfgmO7IzcgS8rpTxmRriSv/XJG4quWqP4b/dAUdSxPnu3Fo:XMZpRHHJalObgJTazXwa5I/CUo2cUe

Score

4^/10

pdf link

HTTP links in PDF interactive object 1 IoCs

Detects HTTP links in interactive objects within PDF files.

resource	yara_rule
static1/unpack001/Approval Disclosure.pdf	pdf_with_link_action

One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
pdf link

Approval Disclosure.7z
.7z

Password: infected
Approval Disclosure.pdf
.pdf
Password: infected
- https://dgv.oldentra.ru/4bw6nDO/