General
-
Target
495a6c4954ae210bf4f66e0d845754bd_JaffaCakes118
-
Size
357KB
-
MD5
495a6c4954ae210bf4f66e0d845754bd
-
SHA1
5b3ffd974da54f154441d84e65ffefbb000cec4a
-
SHA256
8b2ae72a3ca1a4e4036635d8cd9c144440c44a6ffc696033952890e82ff6b12b
-
SHA512
d2c04ffb8ec2ab3a880a276267883647f599cfcb88d27bd6b91d46a74fba3b5fb8f373a4612d62299fd648f371522b3b4094fdb72105a36be94ffc0c28b7b03d
-
SSDEEP
6144:gXV11GtLOPYx/Uc4U7rE6OA1M6Ut7livo0NyPhjdIyx+Fx+3QmlF4UFhOV:WMtn/7RrE6V1UX2FNmhjDxYUtphOV
Malware Config
Signatures
-
One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
Files
-
495a6c4954ae210bf4f66e0d845754bd_JaffaCakes118
-
http://botcraftman.ru/?lip&keyword=%D1%81%D0%BE%D0%B2%D0%B5%D1%82%D1%81%D0%BA%D0%B8%D0%B5+%D0%B2%D0%BE%D0%B5%D0%BD%D0%BD%D1%8B%D0%B5+%D0%BA%D0%B0%D1%80%D1%82%D1%8B+pro+%D1%81%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C+%D0%B1%D0%B5%D1%81%D0%BF%D0%BB%D0%B0%D1%82%D0%BD%D0%BE&charset=utf-8
-
http://img1.liveinternet.ru/images/attach/c/7//4787/4787917_domashnee__zadanie__solfedzhio_.pdf
-
http://img1.liveinternet.ru/images/attach/c/7//4787/4787927_kak__razblokirovat__sim_.pdf
-
http://img1.liveinternet.ru/images/attach/c/7//4787/4787983_prays__list__na_.pdf
-