General
-
Target
Texas Department of Transportation-Xerox PwUpG0C.pdf
-
Size
52KB
-
MD5
fa17b37a49532d7f42ca9653edb8eae4
-
SHA1
1c66c5aeec960f9f128bb7da1e387f9a1b2076ea
-
SHA256
377666eb3ef3e2ff5067d67030d4671542d9cb310d834f635f0905f81d801b2f
-
SHA512
7ff229dc1ebc8c2ba046afc48139e7abea5ad1418a35579119a7981bb7284167d8b74ca3890102357b16b2eb015368a64b1b732bac7d5a4e9060979f482d4110
-
SSDEEP
768:yMSjGCZfwWdeeK8MKSdYLv+EiFPyhi8p01ppRh+T1RvxP4dEtS8oihJRriFRV9KF:wbdeR4+EiFNa0XDczXS8oihCYf9
Malware Config
Signatures
-
HTTP links in PDF interactive object 1 IoCs
Detects HTTP links in interactive objects within PDF files.
-
One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
Files
-
Texas Department of Transportation-Xerox PwUpG0C.pdf
-
http://txdot.gov
-
https://opodo.onelink.me/RnQA?pid=CRM&af_adset=email&af_ad=crm_nl_PDA_SneakPeek_NP_X_290124__&is_retargeting=true&af_dp=op-app%253A%252F%252Flaunch%252F%253futm_content%253dUL_hero%2526utm_source%253dsf%2526utm_medium%253dcrm%2526utm_campaign%253dnl%2526utm_term%253dXX-XX-CRM-E-NL-PDA-FL-X-NP_PrimeDay8_NonPrime_SneakPeekAPP_290124_Render_435150%2526mktportal%253dNL&af_web_dp=https://matsyakanya.com/logs/2137/new/new/[email protected]##
-