Overview

overview

3

Static

static

3

4c97c1a1c9...18.pdf

windows7-x64

1

4c97c1a1c9...18.pdf

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    4c97c1a1c9714afb2bb7e42229fd39be_JaffaCakes118

  • Size

    346KB

  • MD5

    4c97c1a1c9714afb2bb7e42229fd39be

  • SHA1

    eb5279817a2e474eac28ce7e53b59fa088e37037

  • SHA256

    2a9977612c80c15de6d93c0913ecfd20f177039e366fc9df50b6dde289926c96

  • SHA512

    bb191edf75ce372a142a282a3d7c18b2bc315ad3dcc65d117a8e752f593a4d7707c18b856b84d73fdfffbb6ea9df2d61752109eca7ab6ec0549966889c7ae68c

  • SSDEEP

    6144:XtFx7wBFGeB+AxsK7jkqmbO9gx6TmBgv/PLs5qufVoRmqzApL/me:Fw8AxsKvukTSQPLsE02mmApd

Score
3/10
pdflink

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

    pdflink

Files

  • 4c97c1a1c9714afb2bb7e42229fd39be_JaffaCakes118
    .pdf

    • http://botcraftman.ru/?lip&keyword=%D1%81%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C+%D0%B7%D1%83%D0%BC%D1%83+%D0%B1%D0%B5%D1%81%D0%BF%D0%BB%D0%B0%D1%82%D0%BD%D0%BE+%D0%BD%D0%B0+%D0%BA%D0%BE%D0%BC%D0%BF%D1%8C%D1%8E%D1%82%D0%B5%D1%80+%D0%B1%D0%B5%D0%B7+%D0%BE%D0%B3%D1%80%D0%B0%D0%BD%D0%B8%D1%87%D0%B5%D0%BD%D0%B8%D1%8F+%D0%B2%D1%80%D0%B5%D0%BC%D0%B5%D0%BD%D0%B8&charset=utf-8