General

  • Target

    30500ca992ee82e1f64fbd1c8adc4226_JaffaCakes118

  • Size

    360KB

  • MD5

    30500ca992ee82e1f64fbd1c8adc4226

  • SHA1

    295a1ab8afe33569e417532e2636940eab46ac58

  • SHA256

    f0292302a931fcc534100d2e690e09873094488aa494edfd5008ef647763332d

  • SHA512

    6cf425a38215082860164ad9ebdeda0b039a4ac3020f005248a423479a399d1710276c3da85f68083b06a22f44a038ebec2c10c95b74643352793c120c5e4ec4

  • SSDEEP

    6144:EUwNJfcFKOr/ll8avz65y2TrnOIec/NaM+7DTL0BiZQ/6XirWVz:EU+Jf0Jl8mz6XvnOIj/NaxcysWVz

Score
3/10

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • 30500ca992ee82e1f64fbd1c8adc4226_JaffaCakes118
    .pdf
    • http://botcraftman.ru/?lip&keyword=%D0%BF%D1%80%D0%BE%D0%B3%D1%80%D0%B0%D0%BC%D0%BC%D0%B0+%D0%B4%D0%BB%D1%8F+%D1%81%D0%BE%D1%81%D1%82%D0%B0%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F+%D0%B1%D0%B8%D0%B7%D0%BD%D0%B5%D1%81+%D0%BF%D0%BB%D0%B0%D0%BD%D0%B0+%D1%81%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C+%D0%B1%D0%B5%D1%81%D0%BF%D0%BB%D0%B0%D1%82%D0%BD%D0%BE&charset=utf-8

    • http://img0.liveinternet.ru/images/attach/c/7//4752/4752422_motionjoy__dualshock__3_.pdf

    • http://img0.liveinternet.ru/images/attach/c/7//4752/4752437_itogovaya__kontrolnaya__po_.pdf

    • http://img1.liveinternet.ru/images/attach/c/7//4751/4751905_bike__park__game_.pdf