General

  • Target

    5d9a24c1bff055374f5cfbeb83da5a3c_JaffaCakes118

  • Size

    188KB

  • MD5

    5d9a24c1bff055374f5cfbeb83da5a3c

  • SHA1

    9c8d34bec9c08e7866779ee4ed85a75811c9e00c

  • SHA256

    897ecc7b5c28330620df5fb1efd845f1dd803a9a46cbffea507cb1c47e7622ae

  • SHA512

    0da71bdde6ce473726f1f0c77219a4d98bb0cf52708fea5ce71244be7934d603f51efdcd70d5362f86af6c3376b951e6838fcd98a6f0e0cab1aa9d967f028668

  • SSDEEP

    3072:Z2irbxzGAFYDMxud7fKg3dXVmbOn5uy6Kjni24BvtrLZRd0sjQS1Y8p/Sk:Z2MKlWQ7Sg3d4bOPi2QLvdXUSJ

Score
3/10

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • 5d9a24c1bff055374f5cfbeb83da5a3c_JaffaCakes118
    .pdf
    • http://botcraftman.ru/?lip&keyword=%D1%83%D1%80%D0%B0%D0%B2%D0%BD%D0%B5%D0%BD%D0%B8%D0%B5+%D1%81+%D0%BE%D0%B4%D0%BD%D0%B8%D0%BC+%D0%BD%D0%B5%D0%B8%D0%B7%D0%B2%D0%B5%D1%81%D1%82%D0%BD%D1%8B%D0%BC+%D0%BF%D1%80%D0%B8%D0%BC%D0%B5%D1%80%D1%8B&charset=utf-8

    • http://fastpic.ru/

    • http://img0.liveinternet.ru/images/attach/c/5//4186/4186883_ct_po_istorii_belarusi_2015.pdf

    • http://img0.liveinternet.ru/images/attach/c/5//4186/4186950_skachat_maynkraft_152_cherez_torrent_besplatno_bez_virusov.pdf

    • http://img1.liveinternet.ru/images/attach/c/5//4187/4187909_star_wars_the_old_republic_online_rusifikator_teksta.pdf

    • http://www.liveinternet.ru/click