General

  • Target

    CCS.INFR.CDMX.J9hmD9UN6Z.pdf

  • Size

    40KB

  • MD5

    2fc348997573da59c05dd06dc95fdd6f

  • SHA1

    ab9af2a8f714277d205d28f30ec301d63b6e8095

  • SHA256

    d2e454c3e75334706d07efad48e4be1434fff67bbb07a629693ea1caa40b3811

  • SHA512

    0fb8ccf6de39b8042c325d0c2f69b76f485ac927e9aa6d5b271b1b8bb652ae91894f7e84bfc6fa6acfd6fe61c73a9859eccbfbb5d680f9ea231d8bea790da3d3

  • SSDEEP

    768:ZtuhJqjMeN+2rQL82xY4PCg5PFmofM/JetNdRnWcnFPL+KwrrNykeMv:gq/IPbNmoMetNfnfd+LNykr

Score
3/10

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • CCS.INFR.CDMX.J9hmD9UN6Z.pdf
    .pdf

    Password: 0808

    • https://209.21.205.92.host.secureserver.net/mx-public/[email protected]

    • https://77.202.178.68.host.secureserver.net/public-mx/[email protected]

    • https://d8hxy.app.goo.gl/aEVpCh6aYyT3t2zB8

    • https://ja2r7.app.goo.gl/Hy9mi36YRFYdnAwu8