General

  • Target

    Документация Snoop Project.pdf

  • Size

    5.9MB

  • MD5

    3f16116a987fc24c62a279320b6e0b83

  • SHA1

    a6ca17849d39a2269925f7dfcb0efba9928037b3

  • SHA256

    80552e809f74119535e2b5c056e268f227bc3e043b087e5b7993b24ec1ef764b

  • SHA512

    9cfefffbe03f1aed22342c544815965193d84ea941e39279765f822a52eab3801554b853ddefe4ac63af28fb63be653f94420b57ae4f879b3660207736abb22e

  • SSDEEP

    98304:mwtLH5M0uYtxLnmZqRT2ukHvmok3dLNDeDyGxeAprL66Go+NjsmJuDbD:tdZMIXbmi2ukHub3ZNqDyghccbD

Score
4/10

Malware Config

Signatures

  • HTTP links in PDF interactive object 1 IoCs

    Detects HTTP links in interactive objects within PDF files.

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • Документация Snoop Project.pdf
    .pdf
    • https://dev.maxmind.com/geoip/geoip2/geolite2/

    • https://drive.google.com/file/d/12DzAQMgTcgeG-zJrfDxpUbFjlXcBq5ih/view

    • https://drive.google.com/file/d/1CJxGRJECezDsaGwxpEw34iJ8MJ9LXCIG/view

    • https://f-droid.org/ru/packages/com.termux/

    • https://git-scm.com/download/win

    • https://github.com/

    • https://github.com/agnostic-apollo/Android-Docs/blob/master/en/docs/apps/processes/phantom-cached-and-empty-processes.md#how-to-disable-the-phantom-processes-killing

    • https://github.com/snooppr/snoop

    • https://github.com/snooppr/snoop/issues

    • Show all