Overview

overview

4

Static

static

4

bc964bb346...cs.pdf

windows7-x64

1

bc964bb346...cs.pdf

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    bc964bb346ba997b9bf5821cac1c8510_NeikiAnalytics

  • Size

    3.2MB

  • MD5

    bc964bb346ba997b9bf5821cac1c8510

  • SHA1

    85158bea6664339c5225ad0e86adeba51c5af191

  • SHA256

    6e6ade23dbfbd642a65c28947d593d1f8c7c72899d0f09cd9e5a01c0dc9a035a

  • SHA512

    6ffcd206dffb41b1fde019c2efb04e147cc6abc84e1d038183eaa72ef18e3467d6d09efa0b117425daa09ad40f23c472918cfc7bd02b7fdd618979af905fd48a

  • SSDEEP

    98304:wghLFXgXDXGF3sgpDaDGe7UgcGjgC6Mwhi0yIsjJB/kfEP3g/Y:wKRQTu1hC6MkyF/aY

Score
4/10
pdflinkqr

Malware Config

Signatures

  • PDF has QR code that contains a HTTP URL

    PDFs with URL QR codes are often used for phishing

    pdfqr
  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

    pdflink

Files

  • bc964bb346ba997b9bf5821cac1c8510_NeikiAnalytics
    .pdf

    • http://lorentzcomms.com

    • http://weixin.qq.com/r/8hHexr3EWuAlrfml90Tg

    • http://www.lorentzcomms.com

    • http://www.lorentzcomms.com/cn