General
-
Target
APOLLO MECHANICAL-nco4zhu.pdf
-
Size
51KB
-
MD5
0cb12a1522dd3ccec156b6cb53195493
-
SHA1
0e5d22b90956bcd7f7f153917c0d1b21a7318f90
-
SHA256
e2d9b1d7f5bc6310c44afa9e38a36e57ffb1f979c070ff8626db14903e45f53c
-
SHA512
b39c0dd8371a126e6d33a179d43c46078285ae66ea3e2b4bf9f36bdcaaaca73d751cf4d125f13c27023e719d2bfe06ce99d3b891eb621b6554047ad779fb91e0
-
SSDEEP
1536:wqCxmkuzmEE90oy5UC41pKzcS8oihCYfl:iVuzg9Zy5/EpUbihCYd
Malware Config
Signatures
-
HTTP links in PDF interactive object 1 IoCs
Detects HTTP links in interactive objects within PDF files.
-
One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
Files
-
APOLLO MECHANICAL-nco4zhu.pdf
-
http://apollomech.com
-
https://opodo.onelink.me/RnQA?pid=CRM&af_adset=email&af_ad=crm_nl_PDA_SneakPeek_NP_X_290124__&is_retargeting=true&af_dp=op-app%253A%252F%252Flaunch%252F%253futm_content%253dUL_hero%2526utm_source%253dsf%2526utm_medium%253dcrm%2526utm_campaign%253dnl%2526utm_term%253dXX-XX-CRM-E-NL-PDA-FL-X-NP_PrimeDay8_NonPrime_SneakPeekAPP_290124_Render_435150%2526mktportal%253dNL&af_web_dp=https://royalgourmet.com.br/logs/6304/new/new/[email protected]##
-