Overview

overview

4

Static

static

4

a62c9e1967...KI.pdf

windows7-x64

1

a62c9e1967...KI.pdf

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    a62c9e1967655fd2bc5c98f1516d89a0_NEIKI
  • Size 865KB
  • Sample240509-ac5tzafc5s
  • SHA256 a2ce4be4f928a3c5c5df74b5a5dccbab79761873ec69f556bb68b0fc8766b8b1
  • MD5 SHA1 SHA512 SSDEEP
Score
4/10
pdflinkqr

Malware Config

Signatures

  • PDF has QR code that contains a HTTP URL

    PDFs with URL QR codes are often used for phishing

    pdfqr
  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

    pdflink

File Explorer

  • a62c9e1967655fd2bc5c98f1516d89a0_NEIKI
    .pdf 865KB

a62c9e1967655fd2bc5c98f1516d89a0_NEIKI

  • SHA256 a2ce4be4f928a3c5c5df74b5a5dccbab79761873ec69f556bb68b0fc8766b8b1
  • MD5 SHA1 SHA512 SSDEEP

Extracted URLs

  • qr http://weixin.qq.com/r/4HU6IjDELG1TrXRB9yDy