General

  • Target

    PW_infected_Confirmation de Commande 123676660_PDF.zip

  • Size

    133KB

  • MD5

    76385b03cff6095c01f481bfcff5ea15

  • SHA1

    9fe111a7f4df715140379e0400f344ddc916d4ae

  • SHA256

    4373af277e5a7c86f0c4ab8d000cf4b5c5fc5e919a99208d426723dfe662a4ba

  • SHA512

    81dd7f3e85fa1f97e802adba7683e39936e964809f5aab298b9b7e498b50d44513eb4fda5e74eff77ebe7c4269c5ac04bd1a106761c4def0604500a647171987

  • SSDEEP

    3072:ZrKyQ0SCu0eEPwgq45tKwFcGgnebl9SWiz7Ap60yvccq/Vk:BlQP0jOx4Cvze60y0c3

Score
3/10

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • PW_infected_Confirmation de Commande 123676660_PDF.zip
    .zip

    Password: infected

  • Confirmation de Commande 123676660.PDF
    .pdf
    • http://rubix.com

    • http://sandvik.com