General

  • Target

    PW_infected_Brammer_pdf.zip

  • Size

    27KB

  • MD5

    8b536c3d823edb3ce1eb3d760e3caa6d

  • SHA1

    d9daaf18ec0fba09c13febafe6edcc76f1f70323

  • SHA256

    ae0f611f235bf4b0e6b8a7a787cc71ec9b11558f51faf92fc55808886aee5f62

  • SHA512

    abeedb141b907e3bc915308fff8c4d4c0733da3668f03097a08ef054a52dee299551e6baf8483d7d0130c407596ecd38c1c5743891047a5a9c655cf748c45b00

  • SSDEEP

    768:h3xR7+LoXhBqbc7vmTFlHvNGH+iojWFrGmzDgO:hBd+LZcSjVNuzkO

Score
3/10

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • PW_infected_Brammer_pdf.zip
    .zip

    Password: infected

  • Brammer.pdf
    .pdf
    • http://go.microsoft.com/fwlink/?LinkID=510400

    • https://d1.convertcart.com/event/v4/click?url=http://share.hsforms.com/1iHmfAbE5RUiBuAH0Ar-XEQrpdjy

    • https://www.microsoft.com/online/legal/v2/?docid=13