General

  • Target

    a545e152391cb2cbbf3856152f4a469a_JaffaCakes118

  • Size

    81KB

  • MD5

    a545e152391cb2cbbf3856152f4a469a

  • SHA1

    6f368bd5637ac2e21b00dd863ea5f5f6b3becce5

  • SHA256

    881d80835485600b538f336a47c7b3332292829c29d9ef9485e9282902bb3d0b

  • SHA512

    5309e5899c6d9da9b2cb0ef9a23f5bbb819cc8abccea4f940f382bd9809b74b03a0df08a773bf0bad54f89bf33a19845631698146bc8103e96f4a18fa3b6419b

  • SSDEEP

    1536:ihN9tYGz9tWtCeshE3yMlaUylVA4Sqkmi4zVCWP77h4C/yvmh:qfxGmC4S9kzoUVG6

Score
4/10

Malware Config

Signatures

  • HTTP links in PDF interactive object 1 IoCs

    Detects HTTP links in interactive objects within PDF files.

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • a545e152391cb2cbbf3856152f4a469a_JaffaCakes118
    .pdf
    • https://babaesonfloor.info/erty/index.php?hisence=deals

    • https://northcentralusr-notifyp.svc.ms/api/v2/tracking/method/Click?mi=pi_gsV3LAEKzkvv0u8kCAg&ru=https%3a%2f%2fprivacy.microsoft.com%2fprivacystatement&tc=PrivacyStatement&cs=0e07659b2986c666099c66b21d33f3f7

    • https://timberproductsinspection-my.sharepoint.com/:b:/g/personal/rsmith_tpinspection_com/Ed49g1PRW91EmRAwMxKPMiMBGumUD1GoXvr7kNAdxJal_g?e=4%3acQ0YuU&at=9