General

  • Target

    16179b613b29505f857fa49959809270_NeikiAnalytics

  • Size

    2.8MB

  • MD5

    16179b613b29505f857fa49959809270

  • SHA1

    0f36ecf6d0ed8b1dcf9326766a1f9f5effd0413d

  • SHA256

    08b8663f8ad93bd10729536452e5cedfcc24510fbd4465b367255b183bf08a42

  • SHA512

    de5d76d85d50d94bae60c326aede0e14a3296ac5697e4f6d0d78bad24ffaa06139510c300d353ceb66a1e898efc68e9e7db2b4ea6c327089e4d927c9d13ea2a6

  • SSDEEP

    49152:SfCSWarmcYNUPTrpfQ74llH9xhCWqmdAYNEQcHUPTlpfJ68kfOdLj2jzdWTOggBV:fSWarmcYNUbrpYUllH3sWZdA66HUblpq

Score
4/10

Malware Config

Signatures

  • HTTP links in PDF interactive object 1 IoCs

    Detects HTTP links in interactive objects within PDF files.

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • 16179b613b29505f857fa49959809270_NeikiAnalytics
    .pdf
    • http://aeat.es

    • http://correo.es

    • http://schemas.xmlsoap.org/soap/envelope/

    • https://comercio.gob.es/ImportacionExportacion/Controles/Paginas/PUE-ESTACICE-ROHS-informacion-desarrolladores.aspx

    • https://www1.agenciatributaria.gob.es/wlpl/AD44-JDIT/ComDatosAdiForm

    • https://www1.agenciatributaria.gob.es/wlpl/AD44-JDIT/ComSolicitudForm

    • https://www1.agenciatributaria.gob.es/wlpl/AD44-JDIT/ENVIODOCPUE

    • https://www1.agenciatributaria.gob.es/wlpl/AD44-JDIT/EnvioMensajePUE

    • https://www1.agenciatributaria.gob.es/wlpl/AD44-JDIT/SvComSolQuery

    • Show all