General
-
Target
392ff1bb61fe6a589d661f0f3badf512_JaffaCakes118
-
Size
185KB
-
MD5
392ff1bb61fe6a589d661f0f3badf512
-
SHA1
4bdc3b294f2fdfc828df4aa34f9878e9a3f3344a
-
SHA256
03c9acb6cab7e901f235e896c2699e6ae077f9cdd903612cde0b3e93dcb75113
-
SHA512
2b60fdf841bd18222072d62c5b0d2b6f05ab66d4882d02b4a88b509bc35506ed6ad996bbee9a279d4462a18a6fc4ebee1b78777da1fbcaf598db9334677c5355
-
SSDEEP
3072:e2irbxzGAFYDMxud7fKg3dXVmbOn5uK6KjnHLBnbl677jDs4lmw5u2xSQ:e2MKlWQ7Sg3d4bOnrBsjDs5q
Malware Config
Signatures
-
One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
Files
-
392ff1bb61fe6a589d661f0f3badf512_JaffaCakes118
-
http://botcraftman.ru/?lip&keyword=%D0%B4%D0%B8%D1%82%D1%8F+%D0%BE%D0%BA%D1%82%D1%8F%D0%B1%D1%80%D1%8F+%D1%81%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C+%D1%82%D0%BE%D1%80%D1%80%D0%B5%D0%BD%D1%82&charset=utf-8
-
http://fastpic.ru/
-
http://img0.liveinternet.ru/images/attach/c/6//4386/4386186_sekretnuye_koduy_nokia_5310.pdf
-
http://img1.liveinternet.ru/images/attach/c/6//4385/4385311_dogovor_arenduy_mesta_pod_reklamu.pdf
-
http://img1.liveinternet.ru/images/attach/c/6//4385/4385806_skachat_znaki_pozharnoy_bezopasnosti.pdf
-
http://www.liveinternet.ru/click
-