General
-
Target
638c029f393804e5b76421d76f5e09c1_JaffaCakes118
-
Size
34KB
-
MD5
638c029f393804e5b76421d76f5e09c1
-
SHA1
df229d3f5aa3cb14ef7bb54372424bc996df06b6
-
SHA256
97ea81c40928b546f758f5e39b56f6b4c8a9b265084cf44c19eddbbeea4c8429
-
SHA512
292e78214fc032e1ddc5231779215bf200175e70a6864f712fa5715deee114b931492a196e1ee3a14f2cfda544388e429a1dc7944ae2447f74fbb1ce825a1075
-
SSDEEP
768:kXuMZmwgCLWarCwaSiw7HaE3uhIR5s7iKE22kG2:kXFZmGWSfaS/2Wuq5s77EWG2
Malware Config
Signatures
-
One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
Files
-
638c029f393804e5b76421d76f5e09c1_JaffaCakes118
-
http://danceartsofcentralnj.com/uploads/1/3/0/7/130740196/4206761.pdf
-
http://igcmz.org/uploads/1/3/0/8/130814596/fekulazek.pdf
-
http://lowskyhoney.com/uploads/1/3/0/7/130739560/gapaka.pdf
-
http://nuhumana.com/uploads/1/3/0/6/130639698/f02ba57.pdf
-
http://qsimspacetime.com/uploads/1/3/0/6/130639949/gikoritijopilo.pdf
-
http://sabalegalservices.com/uploads/1/3/1/3/131378795/131378795.html#equator+crossing+certificate
-