General

  • Target

    Fuck-the-Feds (1).pdf

  • Size

    319KB

  • MD5

    da9f1d770a0a758cf818b471be2ea87f

  • SHA1

    df1836bcbf1bcde6c1c0cda92e7ee0a247ef318f

  • SHA256

    ea13b2a7ca5eaf31515acc121bd08a609cd8b64b33ea905dd530a4d600ee8526

  • SHA512

    71e84a16f463e39eb18b37029fab9c1c5481a56855c76c7dab31c5f2be67c68ebffaaf78bad68a74c2ee30de1b4747ec64cd63058eb8fce2e3bfc3f959aad2ed

  • SSDEEP

    6144:NaSLoXxjL+oBimrX7W2fnT7i9Wq3HYqwRxfu/2:NaksyoNiUTrq34qwXfl

Score
4/10

Malware Config

Signatures

  • HTTP links in PDF interactive object 1 IoCs

    Detects HTTP links in interactive objects within PDF files.

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • Fuck-the-Feds (1).pdf
    .pdf
    • https://eraser.heidi.ie/

    • https://randomkeygen.com/

    • https://therecord.media/fbi-document-shows-what-data-can-be-obtained-from-encrypted-messaging-apps/

    • https://www.veracrypt.fr/en/Downloads.html