General
-
Target
Public Broadcasting Service-HBWfZs6.pdf
-
Size
65KB
-
MD5
fc3c8ebdbc515dc9847aab14061398c8
-
SHA1
95bbc7c3596fa3e82212b9973554d97299be462a
-
SHA256
fbd39f1bc45fd8ffd91d99842b3475f11695c51ed034d2f8b1fa168b6f31ad3c
-
SHA512
b66e14eeaf4bad3239f5b88fb02bb5016207c536f8ee6165c07c448f4eb1f05e223585219efcfd5354f27286baedec4235d9f8197a9438548d2033d900d50461
-
SSDEEP
1536:w2MHNkQpdCigjJ/t4/OY0U/JX7AbMBwNgQziAa7V3axi7jir8:3MHxdYjJ2jz/JMIFQzaKMvr
Malware Config
Signatures
-
HTTP links in PDF interactive object 1 IoCs
Detects HTTP links in interactive objects within PDF files.
-
One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
Files
-
Public Broadcasting Service-HBWfZs6.pdf
-
http://pbs.org
-
http://rogers-howard.com
-
https://opodo.onelink.me/RnQA?pid=CRM&af_adset=email&af_ad=crm_nl_PDA_SneakPeek_NP_X_290124__&is_retargeting=true&af_dp=op-app%253A%252F%252Flaunch%252F%253futm_content%253dUL_hero%2526utm_source%253dsf%2526utm_medium%253dcrm%2526utm_campaign%253dnl%2526utm_term%253dXX-XX-CRM-E-NL-PDA-FL-X-NP_PrimeDay8_NonPrime_SneakPeekAPP_290124_Render_435150%2526mktportal%253dNL&af_web_dp=https://wmd.god21.net/ViewSwitcher/SwitchView?mobile=False&returnUrl=http://89984-6222.airholidays.in/encryption/00152689/php/connection///#/?/[email protected]##
-