General
-
Target
7c1662ad0bc69c0257118a6399df83f6_JaffaCakes118
-
Size
184KB
-
MD5
7c1662ad0bc69c0257118a6399df83f6
-
SHA1
1c444e3e6c3be014bad0edbddf7206fefd244917
-
SHA256
ccbaaa10cff72ed7281f2c06d15679c5330ed3fb25c0c06a7935772df152ed1d
-
SHA512
01a70c0c0d824efd19468abe8d0b7073c96a59af09b63814f7b5b1e84a3cef444568a141e9700392a3017834d96e34cefc7065f965f170c1575fb140e15a911c
-
SSDEEP
3072:P2irbxzGAFYDMxud7fKg3dXVmbOn5uo6KjnHv394cGJw2d2xjQS1quI2SG:P2MKlWQ7Sg3d4bOBFAw2qUS0up
Malware Config
Signatures
-
One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
Files
-
7c1662ad0bc69c0257118a6399df83f6_JaffaCakes118
-
http://botcraftman.ru/?lip&keyword=%D0%9A%D0%B0%D0%BA+%D0%B2%D0%BE%D1%81%D1%81%D1%82%D0%B0%D0%BD%D0%BE%D0%B2%D0%B8%D1%82%D1%8C+%D0%B0%D0%BA%D0%BA%D0%B0%D1%83%D0%BD%D1%82+%D0%B2+%D0%B2%D0%B0%D1%80%D1%84%D0%B5%D0%B9%D1%81%D0%B5&charset=utf-8
-
http://fastpic.ru/
-
http://img0.liveinternet.ru/images/attach/c/5//4188/4188379_skachat_whatsarr.pdf
-
http://img0.liveinternet.ru/images/attach/c/5//4194/4194039_skachat_zapisi_privatov.pdf
-
http://img1.liveinternet.ru/images/attach/c/5//4193/4193940_skachat_maynkraft_1_6_4_torrent_skachat.pdf
-
http://www.liveinternet.ru/click
-