General
-
Target
6d7a9d372599a251dcbd7542fd72d536_JaffaCakes118
-
Size
185KB
-
MD5
6d7a9d372599a251dcbd7542fd72d536
-
SHA1
32024598b040897f84caec21894559e50ee82aa9
-
SHA256
465eac9f6ab7fcd0caf61d684543da3decbae3abec320ab94433cfe0fc4190f0
-
SHA512
4d6f214865336018089b64052aecffa5f1150bdbf3ae2c01ffb9ac7ed2cb4a3876bed141469c624955cea8655d12f9830862980a3708f416ce4bf123468dbedc
-
SSDEEP
3072:22irbxzGAFYDMxud7fKg3dXVmbOn5uC6KjnHqjDUcR8PHmmExrlwsBG1SSU:22MKlWQ7Sg3d4bO7/c+PmFJwswQ
Malware Config
Signatures
-
One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
Files
-
6d7a9d372599a251dcbd7542fd72d536_JaffaCakes118
-
http://botcraftman.ru/?lip&keyword=%D0%B0%D0%BD%D0%B3%D0%BB%D0%BE-%D1%80%D1%83%D1%81%D1%81%D0%BA%D0%B8%D0%B9+%D1%81%D0%BB%D0%BE%D0%B2%D0%B0%D1%80%D1%8C+%D1%81%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C+%D0%B1%D0%B5%D1%81%D0%BF%D0%BB%D0%B0%D1%82%D0%BD%D0%BE+txt&charset=utf-8
-
http://fastpic.ru/
-
http://img0.liveinternet.ru/images/attach/c/6//4304/4304481_skachat_ks_16_43_patch_torrent.pdf
-
http://img0.liveinternet.ru/images/attach/c/6//4304/4304525_raspisanie_avtobusov_ufa_cheboksaruy.pdf
-
http://img0.liveinternet.ru/images/attach/c/6//4304/4304545_lesnaya_bratva_skachat_igru.pdf
-
http://www.liveinternet.ru/click
-