General
-
Target
3e24cf457de01a8859c7f98215b00a2c_JaffaCakes118
-
Size
360KB
-
MD5
3e24cf457de01a8859c7f98215b00a2c
-
SHA1
4aab95e8266a694972d491ccdc8a6bf5dc819e4e
-
SHA256
997393e895dea2e818107b5a6a503c55ade61d0c5a03799499e7817cf49a1112
-
SHA512
b26fe30c6087885c4784a13c9e029f45cf04652448376473bc1b7b5a1d296497a9bf29dcb028a964fea065f7091fef339f2f89b768a490e3b90d4647a876e64b
-
SSDEEP
6144:jaDuIvdRvOaWaG20oOcHnj2KWb0ZeN0hjSq9n6BHVQ0GGdT6/OZWVMHwQRqGPmd7:mDvdJOaWaGvo5HniYeMSq9nM9GrO/wQQ
Malware Config
Signatures
-
One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
Files
-
3e24cf457de01a8859c7f98215b00a2c_JaffaCakes118
-
http://botcraftman.ru/?lip&keyword=%D1%81%D0%B0%D0%BC%D0%BE%D1%83%D1%87%D0%B8%D1%82%D0%B5%D0%BB%D1%8C+%D0%BA%D0%BE%D1%80%D0%B5%D0%B9%D1%81%D0%BA%D0%BE%D0%B3%D0%BE+%D1%8F%D0%B7%D1%8B%D0%BA%D0%B0+%D0%B4%D0%BB%D1%8F+%D0%BD%D0%B0%D1%87%D0%B8%D0%BD%D0%B0%D1%8E%D1%89%D0%B8%D1%85&charset=utf-8
-
http://img1.liveinternet.ru/images/attach/c/7//4751/4751810_klyuch__k__igre_.pdf
-
http://img1.liveinternet.ru/images/attach/c/7//4751/4751819_kursovaya__rabota__na_.pdf
-
http://img1.liveinternet.ru/images/attach/c/7//4751/4751921_lovi__video__skachat_.pdf
-