6d53303c036d80e24ed6b7ae5e81fdfb_JaffaCakes118

Resubmissions

Sharing

Copy URL Twitter E-mail

General

Target

6d53303c036d80e24ed6b7ae5e81fdfb_JaffaCakes118
Size

502KB
MD5

6d53303c036d80e24ed6b7ae5e81fdfb
SHA1

dcb0089062fe06a19535139ba1238b1c30b1ecf1
SHA256

7e1a8d1830b8eabf015c559df700784d9079a4f03d09a872ef2856a71f081297
SHA512

ca2e0f66c756b69aba4eda37f9b9da6430bf0e03aadd41e54f2195c6e308d45a4157f815dea6cbb882ebda95d61a6752b860f9a921d2e438494bc38e5add34af
SSDEEP

6144:4lIBeeh52TGyIBeehf2TQWK+OavsPrGc9AKQik89iDlD0uuwgi29pNB3nPTCJ0mK:4SBA6fBmEWK+O6scctADl+xN1+JQQbG7

Score

4^/10

pdf link qr

Malware Config

Signatures

HTTP links in PDF interactive object 1 IoCs

Detects HTTP links in interactive objects within PDF files.

pdf link

resource	yara_rule
sample	pdf_with_link_action

PDF has QR code that contains a HTTP URL
PDFs with URL QR codes are often used for phishing
pdf qr
One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
pdf link

Files

6d53303c036d80e24ed6b7ae5e81fdfb_JaffaCakes118
.pdf
- http://mail.ru
- http://nappf.ru
- http://navpam.ru
- http://navpam.ru/
- http://navpam.ru/artmedia/documentaln-filmy
- http://navpam.ru/artmedia/khudozhestvennye-filmy
- http://pobeda.poklonnayagora.ru/city/
- http://pobeda.poklonnayagora.ru/tech/
- http://www.за-честные-продукты.рф/
- http://ya.ru
- http://yandex.ru
- http://yugorsk-five-school.ru/
- http://папашеф.рф/
- http://письмо-солдату.рус/
- https://alenavoice.ru/uroki-vokala/kak-razuchivat-pesni
- https://chat.whatsapp.com/
- https://chat.whatsapp.com/Bk5Bv7GLoEp9AUCNxcpdrz
- https://chat.whatsapp.com/Bk5Bv7GLoEp9AUCNxcpdrzen-US
- https://chat.whatsapp.com/en-US
- https://daily.afisha.ru/brain/4272-10-sovetov-o-tom-kak-pravilno-hodit-v-muzey/
- https://dropi.ru/posts/istoricheskij-test-chto-ty-pomnish-o-vtoroj-mirovoj-vojne
- https://dropi.ru/posts/test-dlya-lyubitelej-i-znatokov-oruzhiya-znaesh-li-ty-strelkovoe-oruzhie-vremen-velikoj-otechestvennoj-vojny
- https://dropi.ru/posts/test-pro-tanki-uznaj-boevuyu-mashinu-po-siluetu
- https://dropi.ru/posts/test-prover-svoi-znaniya-ob-sssr-vo-vremya-velikoj-otechestvennoj-vojny
- https://miridei.com/idei-dosuga/kakuyu-knigu-pochitat/10_samyh_silnyh_knig_o_vojne_do_murashek_po_kozhe_i_drozhi_v_tele/
- https://mytyshi-school1.edusite.ru/p298aa1.html
- https://pravoslavie.ru/53349.html
- https://ru.wikipedia.org/wiki/%D0%93%D0%BE%D1%80%D0%BE%D0%B4%D0%B0-%D0%B3%D0%B5%D1%80%D0%BE%D0%B8
- https://ru.wikipedia.org/wiki/%D0%9A%D0%B0%D1%80%D0%B1%D1%8B%D1%88%D0%B5%D0%B2,_%D0%94%D0%BC%D0%B8%D1%82%D1%80%D0%B8%D0%B9_%D0%9C%D0%B8%D1%85%D0%B0%D0%B9%D0%BB%D0%BE%D0%B2%D0%B8%D1%87
- https://tatfrontu.ru/term-common/galereya
- https://warspot.ru/11978-shutok-ne-lyubit-oshibok-ne-proschaet-test-warspot
- https://www.bookol.ru
- https://www.bookol.ru/
- https://www.facebook.com/BrazhkoAleksandr/
- https://www.facebook.com/groups/75Pobeda/
- https://www.facebook.com/groups/ircstars/
- https://www.litmir.me
- https://www.litmir.me/
- https://www.youtube.com
- https://www.youtube.com/
- https://www.youtube.com/playlist?list=PLA1-QYKy_mCn4yusKNzGK87AVKzZ2aXSm
- https://www.youtube.com/watch?v=84skplbg4DY&
- https://yadi.sk/d/4aAcme984l_-LA
- https://yandex.ru/efir?stream_id=4a3bdae344abe1759da36cd7ba976cb5
- https://youtu.be/XCSbQUrhXP4
- Show all