Overview

overview

4

Static

static

4

bc964bb346...cs.pdf

windows7-x64

1

bc964bb346...cs.pdf

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    bc964bb346ba997b9bf5821cac1c8510_NeikiAnalytics
  • Size 3.2MB
  • Sample240513-shrhmscd45
  • SHA256 6e6ade23dbfbd642a65c28947d593d1f8c7c72899d0f09cd9e5a01c0dc9a035a
  • MD5 SHA1 SHA512 SSDEEP
Score
4/10
pdflinkqr

Malware Config

Signatures

  • PDF has QR code that contains a HTTP URL

    PDFs with URL QR codes are often used for phishing

    pdfqr
  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

    pdflink

File Explorer

  • bc964bb346ba997b9bf5821cac1c8510_NeikiAnalytics
    .pdf 3.2MB

bc964bb346ba997b9bf5821cac1c8510_NeikiAnalytics

  • SHA256 6e6ade23dbfbd642a65c28947d593d1f8c7c72899d0f09cd9e5a01c0dc9a035a
  • MD5 SHA1 SHA512 SSDEEP

Extracted URLs

  • file http://lorentzcomms.com

  • qr http://weixin.qq.com/r/8hHexr3EWuAlrfml90Tg

  • file http://www.lorentzcomms.com

  • file http://www.lorentzcomms.com/cn