Overview

overview

4

Static

static

4

??.pdf

windows7-x64

1

??.pdf

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    MDE_File_Sample_3111cc6c28d4b7555252c2eee2fe408b735831bf.zip

  • Size

    110KB

  • MD5

    0212308a815718a371a8809b5065e866

  • SHA1

    74e7c25c717ef7eca292f83fd37bb38f25408467

  • SHA256

    315b8fad5759e578b3d26cd432ae24af0ab01f5bbf765a5449f54607cb658adf

  • SHA512

    f2480169141ecba546c67fb99eea40d596c1a55d03de4a55acc1741d657871a5c12783b297a0bd2144b5c00169fabd81f8ca2125b4bad94738b4b4b2c0a2fc0e

  • SSDEEP

    3072:pmfa2AmoQt1ugvs6V43ZkwZrblCQzgZOr1YsNmx+57:ESfmoyuTx3Z3Z3lN71YsNmx+57

Score
4/10
pdflinkqr

Malware Config

Signatures

  • PDF has QR code that contains a HTTP URL

    PDFs with URL QR codes are often used for phishing

    pdfqr
  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

    pdflink

Files

  • MDE_File_Sample_3111cc6c28d4b7555252c2eee2fe408b735831bf.zip
    .zip

    Password: infected

  • ??.pdf
    .pdf

    Password: infected

    • http://qh.xcegx.cn