General
-
Target
acbff269eb52a4d1e43f110cdf094aa4_JaffaCakes118
-
Size
186KB
-
MD5
acbff269eb52a4d1e43f110cdf094aa4
-
SHA1
e04d34b3c9661bd4a4a73f532017116741b3e190
-
SHA256
ca822350f3fb2b358568e05d4fa2d2c67c78bfd40dc83a9138ce92407a61f616
-
SHA512
be0be178ecf187159a980cddbcdb2138dd1e924b8d749c861334e47d3b83abbd3d386703d9cfe6d3ca6dbe49f788d1c1c81ccb3d4fdae02203637383dd1d458c
-
SSDEEP
3072:t2irbxzGAFYDMxud7fKg3dXVmbOn5uy6KjnM8GkYcvaH26jNzksAn9HZtSC:t2MKlWQ7Sg3d4bObAk+HrGsA9j
Malware Config
Signatures
-
One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
Files
-
acbff269eb52a4d1e43f110cdf094aa4_JaffaCakes118
-
http://botcraftman.ru/?lip&keyword=%D0%9A%D0%B8%D1%82%D0%B0%D0%B9%D1%81%D0%BA%D0%B8%D0%B9+%D0%BC%D0%B0%D1%81%D1%81%D0%B0%D0%B6%D0%B5%D1%80+health+herald+%D0%B8%D0%BD%D1%81%D1%82%D1%80%D1%83%D0%BA%D1%86%D0%B8%D1%8F+%D0%BD%D0%B0+%D1%80%D1%83%D1%81%D1%81%D0%BA%D0%BE%D0%BC&charset=utf-8
-
http://fastpic.ru/
-
http://img0.liveinternet.ru/images/attach/c/5//4184/4184357_speed_art_skachat_programmu_dlya_risovaniya.pdf
-
http://img0.liveinternet.ru/images/attach/c/5//4184/4184648_skachat_zvuk_aski_na_sms.pdf
-
http://img0.liveinternet.ru/images/attach/c/5//4184/4184777_proekt_metallicheskogo_garazha.pdf
-
http://www.liveinternet.ru/click
-