General
-
Target
38f9d9e4069b86749cb34a2b1c6ab320N.pdf
-
Size
432KB
-
MD5
38f9d9e4069b86749cb34a2b1c6ab320
-
SHA1
e7a0f0a1d31f9fa9192cdc2810ec48f920250856
-
SHA256
76a5f6b0398f9bf9be13d3e60f3001f8ea9c06b7c1dbd4900bc0a734251f583b
-
SHA512
06c2742995d94818b7bd322e9768e72bf80b295783b7c3d9028a1adddc573d1f00158615fe52cf9b3b6ec1141776c0fbc94283047c0e87f05541722e752bf5c2
-
SSDEEP
6144:oIhw4y1rycGQ9+DLw81ysMXtQzbp7OQrtZJgPEpyrt1V3D87ttpUVhTEdW0LDgAp:9ezx9+DL1RMXsp7LZJgPiyx87HpUYd3p
Malware Config
Signatures
-
One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
Files
-
38f9d9e4069b86749cb34a2b1c6ab320N.pdf
-
http://net.stuun.com/im/qq/45295.html
-
http://taiwan.cnet.com/downloads/utility/0
-
http://webmail.stut.edu.tw
-
http://www.cert.org.tw/document/column/show.p
-
http://www.effetech.com/msn-sniffer/
-
http://www.effetech.com/msn-sniffer/7http://taiwan.cnet.com/downloads/utility/0,2000071099,20013408s,00.htm8http://www.softking.com.tw/soft/clickcount.asp?fid3=210069http://net.stuun.com/im/qq/45295.html[10]http://www.cert.org.tw/document/column/show.php?key=95
-
http://www.softking.com.tw/soft/clickcount.asp
-
http://www.tw-msn.com/love/index.asp
-
http://www.tw-msn.com/love/index.asp?=hgtht.jpg
-