Overview

overview

6

Static

static

6

8ecad6002a...ae.pdf

windows7-x64

1

8ecad6002a...ae.pdf

windows10-2004-x64

1

8ecad6002a...ae.pdf

android-13-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    8ecad6002a4dd99a94fe7b134c5dd7308b9d2156726be0968419ded1e7a429ae.zip

  • Size

    73KB

  • MD5

    7e0437dba9464d6720dcc29345672c1f

  • SHA1

    707a94411657dac7b0926adb9a5587a99a8d4a26

  • SHA256

    0c8b0820e3c6e2231aced79cc4af41f1be09c32c25d0edbcf005b3c04c0eb1ce

  • SHA512

    933d8f4813a17ad55ec7c3380a9813991a60c670bab03da076e1d022712674f71998d09fc79dafd0b72a60e7498cb576b741dfe9dafba19313bbb8d8cf0248dd

  • SSDEEP

    1536:n2rT9SyGOczTYQyyYtyR4dnxwb980bHDyvhP14/dhAcr2p1DtX8:nWTAyGVP3yeSC980OvF14/dicrI1Dx8

Score
6/10
pdflinkjavascript

Malware Config

Signatures

  • PDF contains JavaScript

    Detects presence of JavaScript in PDF files.

    pdfjavascript
  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

    pdflink

Files

  • 8ecad6002a4dd99a94fe7b134c5dd7308b9d2156726be0968419ded1e7a429ae.zip
    .zip

    Password: infected

  • 8ecad6002a4dd99a94fe7b134c5dd7308b9d2156726be0968419ded1e7a429ae.pdf
    .pdf

    Password: Infected

    • https://mazcdn.studiwag.top/bowRuxFV

    • https://sharedfiles.ac-page.com/s

    • https://workonwheel.ac-page.com/no

    • https://workonwheel.ac-page.com/s

    • https://www.example.com