General

  • Target

    2d06d5b3f965675f0892125d8901e3ae_JaffaCakes118

  • Size

    365KB

  • MD5

    2d06d5b3f965675f0892125d8901e3ae

  • SHA1

    ccd8a523f590f6707246beb8ae73af6e8874ea2c

  • SHA256

    dd5416ccb6f67d7d532a7bb954ae0fc19dc1d1aee4d69004b61d4242748e589f

  • SHA512

    345ca21172dd8ae45815ccfac289a3df5f19d8e93109d10b5b09b71f63a59a82066d4120257c5db2b8b3bc99fdb8cac6f912fa09d63c21311ce0a587f1ebbc0d

  • SSDEEP

    6144:gVJR6G/WtzsTem6ogk2Y/5j8mBH1xFbqkJdPfc3WCVtZuphyyRIAym:GJIG/Uz+x6o95j3trxqkJdPfc3WCVt4N

Score
3/10

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • 2d06d5b3f965675f0892125d8901e3ae_JaffaCakes118
    .pdf
    • http://botcraftman.ru/?lip&keyword=%D1%81%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C+%D0%B3%D1%82%D0%B0+%D1%81%D0%B0%D0%BD%D0%B0%D0%BD%D0%B4%D1%80%D0%B5%D1%81+%D0%BA%D1%80%D0%B8%D0%BC%D0%B8%D0%BD%D0%B0%D0%BB%D1%8C%D0%BD%D0%B0%D1%8F+%D1%80%D0%BE%D1%81%D1%81%D0%B8%D1%8F+%D0%B1%D0%B5%D1%82%D0%B0+2&charset=utf-8

    • http://img0.liveinternet.ru/images/attach/c/7//4752/4752111_klyuchi__dlya__revo_.pdf

    • http://img0.liveinternet.ru/images/attach/c/7//4752/4752612_creative__console__launcher_.pdf

    • http://img1.liveinternet.ru/images/attach/c/7//4751/4751963_obrazec__zayavleniya__vzuyskatelya_.pdf