General
-
Target
52b529fa3a9adb94b176b6b444e66900_NeikiAnalytics
-
Size
210KB
-
MD5
52b529fa3a9adb94b176b6b444e66900
-
SHA1
5479531a576f2682919e69e578ef9d8fc6cf82b7
-
SHA256
e4a5ffcb3943b136c87b56a2356ed05e5d9c953c102f4f4426140a61578919d3
-
SHA512
1adf87bd67712a24f73fda273627b0c549c5b22180373a10d63de7f310f4f46c4358e13f9ad93f740e24a410b717ddf02c65730470809c2ce8bf08f286a376e9
-
SSDEEP
6144:+HJr1Z37hd/Dp3wNM0fzOf7yU/wcSmXmG2wNg6ud1Ux:+pBRDWlayFcf2G2wa2
Malware Config
Signatures
-
One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
Files
-
52b529fa3a9adb94b176b6b444e66900_NeikiAnalytics
-
http://applications.saskatchewan.ca/FAM/PDF/3005.pdf
-
http://applications.saskatchewan.ca/FAM/PDF/3120.pdf
-
http://applications.saskatchewan.ca/FAM/PDF/4205.pdf
-
http://applications.saskatchewan.ca/FAM/PDF/4510.pdf
-
http://applications.saskatchewan.ca/accman/AMAppendixH
-
https://pubsaskdev.blob.core.windows.net/pubsask-prod/1224/P42-1.pdf
-
https://pubsaskdev.blob.core.windows.net/pubsask-prod/2373/P42-1R1.pdf
-
https://pubsaskdev.blob.core.windows.net/pubsask-prod/543/C50-11.pdf
-