General
-
Target
b2745728c52728ad9a0962ba0f708ad7_JaffaCakes118
-
Size
343KB
-
MD5
b2745728c52728ad9a0962ba0f708ad7
-
SHA1
d57d7376061c577cc0eeca7268eda5b575073803
-
SHA256
5889e8708c380f25de8661e081b387fe5c5c842d9556cdbf77d0bb92a925e85a
-
SHA512
5a44d396990c7d721029a7cdf96de8671b23bba765642b0d3912c92b3bb9151996146a634c5258ca90d502c83070dcf3d340c1fff92c755198315c115629dc2a
-
SSDEEP
6144:Nf6x/p2k8BeD4/R8dwNje2Gdms88LEEu3v:Nf6zqeCR8QfGd78iiv
Malware Config
Signatures
-
One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
Files
-
b2745728c52728ad9a0962ba0f708ad7_JaffaCakes118
-
http://botcraftman.ru/?lip&keyword=%D0%BD%D0%B5%D0%B7%D0%B0%D0%BA%D0%BE%D0%BD%D1%87%D0%B5%D0%BD%D0%BD%D1%8B%D0%B9+%D1%80%D0%BE%D0%BC%D0%B0%D0%BD+%D0%BD%D0%BE%D1%82%D1%8B&charset=utf-8
-
http://img1.liveinternet.ru/images/attach/c/7//4751/4751647_privetstvie__kvn_.pdf
-
http://img1.liveinternet.ru/images/attach/c/7//4751/4751875_prilozhenie__vk__moi_.pdf
-
http://img1.liveinternet.ru/images/attach/c/7//4751/4751904_klyuch__na__vindovs_.pdf
-