General
-
Target
b84cdc5f91ce0ea82158a0bb3bc47c8b_JaffaCakes118
-
Size
340KB
-
MD5
b84cdc5f91ce0ea82158a0bb3bc47c8b
-
SHA1
d0ebe29af7b02bc6ac972a72038c57d8ca2a0c6a
-
SHA256
165956fa8cc15d7ca95fa9c063140ab1423e4ece731abf011681d9483ee7cd15
-
SHA512
a859b846c98e18dab54faca18d69f1391073d2399c2b03329fd0ce4135ac617187b82166c514e32bc3693cdcf09dcae1218d108f18cadf8f160891dbf6305f7a
-
SSDEEP
6144:EbznHJ98wUzvbZ30a5kSB4+RjohWcEBM/DEwNxuj5ELkgdr4OH/:0H8B30a5TohWcEBMIwNxqQOm
Malware Config
Signatures
-
One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
Files
-
b84cdc5f91ce0ea82158a0bb3bc47c8b_JaffaCakes118
-
http://botcraftman.ru/?lip&keyword=Visio+2003+rus+%D1%81%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C+%D0%B1%D0%B5%D1%81%D0%BF%D0%BB%D0%B0%D1%82%D0%BD%D0%BE&charset=utf-8
-
http://img0.liveinternet.ru/images/attach/c/6//4638/4638880_chituy_vh_dlya_css_v34.pdf
-
http://img1.liveinternet.ru/images/attach/c/6//4639/4639523_mfyua_neoficialnuyy_sayt_fayloobmennik.pdf
-
http://img1.liveinternet.ru/images/attach/c/6//4639/4639699_skachat_moduy_na_fermer_simulyator_2015.pdf
-