General
-
Target
c1dd52adffd5a3ba5d6f26278a8638c5_JaffaCakes118
-
Size
360KB
-
MD5
c1dd52adffd5a3ba5d6f26278a8638c5
-
SHA1
980ca2db6a1d305f8406dc77399cd0c70329c5c2
-
SHA256
b450ce4bb580815db483229cd40c24ad8f843f132a882232bae6e41d97424244
-
SHA512
cb43a0af3bed2570711afcaf6aeaff0e2ece3c9f78f80660692a7a656f3f6d3c1426cc4e05dd6bb8c94d976504df45a2a63d26b208a64be90ef0597675d56b6f
-
SSDEEP
6144:I1vyNSe5srY6tYJ43w357PHrcohVCSZf3svD19Oku55J1c+9uo/uW:I4jak6tYzJLNVCSR3svZwksX91/r
Malware Config
Signatures
-
One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
Files
-
c1dd52adffd5a3ba5d6f26278a8638c5_JaffaCakes118
-
http://botcraftman.ru/?lip&keyword=%D0%BC%D1%83%D0%BB%D1%8C%D1%82%D0%BA%D0%BE%D0%BD%D1%86%D0%B5%D1%80%D1%82+%D0%B2%D0%B8%D0%B4%D0%B5%D0%BE+%D1%81%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C+%D0%B1%D0%B5%D1%81%D0%BF%D0%BB%D0%B0%D1%82%D0%BD%D0%BE&charset=utf-8
-
http://img0.liveinternet.ru/images/attach/c/6//4696/4696030_ozvuchit__tekst_.pdf
-
http://img1.liveinternet.ru/images/attach/c/6//4693/4693392_itogovuyy__test__po_.pdf
-
http://img1.liveinternet.ru/images/attach/c/6//4695/4695383_igra__prestolov__3_.pdf
-