General
-
Target
8efab2de9897019b67a55507b0b121e6_JaffaCakes118
-
Size
185KB
-
MD5
8efab2de9897019b67a55507b0b121e6
-
SHA1
01ce8af4550a5f7c867dc75344ed974c8cf00c58
-
SHA256
1ce3a538bf1640373b674f0139ef0517519f0851e0910635cecd90f40ccfeee0
-
SHA512
c0dd003aba763744cf496a27c0aafb672b45c05af79c00e8ed091d2a8f8b3bd1fe792f1be95a2ea6a84b82ec7d550f086434e5a880c628ea7a85f714e72392f5
-
SSDEEP
3072:v2irbxzGAFYDMxud7fKg3dXVmbOn5uC6KjnyCenpZMcTNt5XzUYQCZtSJ:v2MKlWQ7Sg3d4bO3REiMrP7o
Malware Config
Signatures
-
One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
Files
-
8efab2de9897019b67a55507b0b121e6_JaffaCakes118
-
http://botcraftman.ru/?lip&keyword=%D1%81%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C+%D1%81%D1%82%D0%B0%D0%BD%D0%B4%D0%B0%D1%80%D1%82%D0%BD%D1%8B%D0%B5+%D0%B8%D0%B3%D1%80%D1%8B+%D0%BD%D0%B0+windows+xp&charset=utf-8
-
http://fastpic.ru/
-
http://img0.liveinternet.ru/images/attach/c/5//4184/4184929_barbie_horse_adventures_riding_camp_skachat.pdf
-
http://img1.liveinternet.ru/images/attach/c/5//4185/4185024_koduy_produkta_dlya_origin_besplatno.pdf
-
http://img1.liveinternet.ru/images/attach/c/5//4185/4185486_fiksiki_novuye_serii_s_41_po_51_skachat_torrent.pdf
-
http://www.liveinternet.ru/click
-