General

  • Target

    1e6b22bb5a38557315aa816666f81ca0.pdf

  • Size

    511KB

  • MD5

    1e6b22bb5a38557315aa816666f81ca0

  • SHA1

    98e016ebe065f29688fc32ba2768750a3473d94e

  • SHA256

    a88947f45082cf34266d0241dfa9a42f7e975451fceea86607e993d244c63655

  • SHA512

    d03f61dcb62c4a5c389d40d179969c00aad05b6f38439be8a36f95fbdfcc55299c8cadc6d3b50cc26656553366f46eaddfb773c07a1153f52671ef6a8ff86c08

  • SSDEEP

    12288:+I7cX/IE4IEp+gp+BlNRWf1mIshujrCiIhUfQNd6C:+9Axbo6s3W9rgNX

Score
4/10

Malware Config

Signatures

  • HTTP links in PDF interactive object 1 IoCs

    Detects HTTP links in interactive objects within PDF files.

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • 1e6b22bb5a38557315aa816666f81ca0.pdf
    .pdf
    • http://Update.zip

    • https://crm.rocket-soft.org/index.php/items/grid_view

    • https://crm.rocket-soft.org/index.php/tickets