General
-
Target
a9628fbaa08356acc15613de7dcc2c10_NeikiAnalytics
-
Size
187KB
-
MD5
a9628fbaa08356acc15613de7dcc2c10
-
SHA1
40d0fe6ccbe0f7669a3089d321788113981c1807
-
SHA256
21e48c5e1fbb09a3bf11b686a0f7d530229d9d6e60fc1d5cc2183fbdbdc88d06
-
SHA512
5d0525337d29faae69f50c3493f31e03b55e09da97557b0d4ac8ee49f70083ee088cad0f4d5ee774aa151865aab9dc876ea8b38e1c7ab33662295083ac49e015
-
SSDEEP
3072:p7tpKNw4atoTKqkMZJeoy17rvvD2MSEC/LPfQFGxxUtyF5ektN5fX0RZS+P9ubV1:h+NstoTVJuvLl3WfQMxz5ekePSG9ubV1
Malware Config
Signatures
-
PDF has QR code that contains a HTTP URL
PDFs with URL QR codes are often used for phishing
-
One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
Files
-
a9628fbaa08356acc15613de7dcc2c10_NeikiAnalytics
-
http://en.m.wikipedia.org
-
https://adservice.google.co.kr/ddm/clk/448794861;252804937;a;;%3F//alpha-one-repair-manual-pdf.gukipub.cfd/suvu.pdf
-
https://adservice.google.co.zw/ddm/clk/300948314;127869103;e;;%3F//who-is-the-issuer-for-cyber-skyline-s-ss.wobekoviva.cfd/151832.pdf
-
https://adservice.google.sr/ddm/clk/310682673;138356009;g;;%3F//suzuki-every-owners-manual-english-pdf.wuganad.sbs/peki.pdf
-
https://raset.kugusuz.sbs/kafegulumibixatoso.pdf
-
https://trono-de-vidro-2-pdf.pokanapants.com/82.pdf
-