729b5c2e8616e0a10818adb95dffbfe2[.]zip | Triage

Resubmissions

14/08/2024, 06:58

240814-hrtdgstdlm 9

14/08/2024, 06:10

240814-gw14fsxhjc 9

Sharing

General

Target

729b5c2e8616e0a10818adb95dffbfe2.zip
Size

435KB
MD5

285b30c27ae37c062d0844d775ed70c4
SHA1

a1802927e2ede0027600239a3b33c823252b922c
SHA256

18929dc1746627f2b5875c80913332e2572f25d817adf435979df2a51d8d2d27
SHA512

2d8df8e2c6dead8c6cc8b09e232be359f0626fe71a014f9723b1fca5fde881c04c3791c6d9e26efa18c673f3aa55def5659f6cf8d49c3fa4b8097ed25619d7c9
SSDEEP

12288:I37a+3WcdAwiWtaLn4XI3QCJgTaI6G6ickgEq:h+GCtton443NJgtp65kFq

Score

4^/10

pdf link

Malware Config

Signatures

HTTP links in PDF interactive object 1 IoCs

Detects HTTP links in interactive objects within PDF files.

resource	yara_rule
static1/unpack001/729b5c2e8616e0a10818adb95dffbfe2	pdf_with_link_action

One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
pdf link

Files

729b5c2e8616e0a10818adb95dffbfe2.zip
.zip

Password: infected
729b5c2e8616e0a10818adb95dffbfe2
.pdf
Password: infected
- https://cdn.discordapp.com/attachments/897446870190800920/1273149440173150218/PURCHASE_ORDER.zip?ex=66bd9050&is=66bc3ed0&hm=ef84c7ad559658e2a30de6c809d284cd431429fe0797a02f7c86f6a59f70f335&