General

  • Target

    update2.pdf.zip

  • Size

    131KB

  • MD5

    4cc267919f59dc8a3acb10dc8284aff9

  • SHA1

    6902be3eefb65e95d48988277ec626ee85bbe219

  • SHA256

    189e61447d173c3518e50687d35ea8258b4954e82b9df9250da20b75a472f568

  • SHA512

    d89014932dd89a6edafe274c955eaa220561d4f239b6c3a67a4b40d5842388f2f396d0c15f3e2e09a90f12fdb2d176edefa6267db7f4bba06d2ed54ff4192d26

  • SSDEEP

    3072:2EfIxGKmnnL/S3ciEMjTmZ4zYVCpYO6ro+31F3CsQKiig:FA4Hn9iEMqlUuHro+31F1kH

Score
4/10

Malware Config

Signatures

  • HTTP links in PDF interactive object 1 IoCs

    Detects HTTP links in interactive objects within PDF files.

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • update2.pdf.zip
    .zip

    Password: infected

  • update2.pdf
    .pdf
    • https://link.storjshare.io/s/jwyite7mez2ilyvm2esxw2jq3apq/crowdstrikeisrael/update.zip?download=1