General

  • Target

    c1f7e2d6109533a935f0c45432fc8b44_JaffaCakes118

  • Size

    350KB

  • MD5

    c1f7e2d6109533a935f0c45432fc8b44

  • SHA1

    050cddf81b55285180a4bad7e97c46e98795b107

  • SHA256

    4310551fb4156d42da0f62fee70ad9d0a14098c883cac0a871f7bcd71cb8914c

  • SHA512

    9cd5f783cfe12fa49c3a70bdf65b7d57e803a66d49f3ab773e5d438388a11ef1899a5779f9f669f397169eabfa3adbc54918b00bcb1a0204463fde0d9f49f2e7

  • SSDEEP

    6144:3hS3tTR1FsjV0QX+5KYtPEq0kYeOMVBpFsDU1ZKVfXyuuTNPgMtP1d5FMvtHGc:3kVsR0c2DYeOMVBDrZWfju5P/9vFg

Score
3/10

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • c1f7e2d6109533a935f0c45432fc8b44_JaffaCakes118
    .pdf
    • http://botcraftman.ru/?lip&keyword=%D0%BA%D0%BB%D1%8E%D1%87+%D0%BA+%D0%B8%D0%B3%D1%80%D0%B5+%D0%BE%D1%85%D0%BE%D1%82%D0%B0+%D0%BD%D0%B0+%D0%B2%D0%B5%D0%B4%D1%8C%D0%BC&charset=utf-8

    • http://img0.liveinternet.ru/images/attach/c/7//4752/4752193_grigoriy__leps__tekstuy_.pdf

    • http://img0.liveinternet.ru/images/attach/c/7//4752/4752730_programma__bars_.pdf

    • http://img0.liveinternet.ru/images/attach/c/7//4754/4754000_koduy__tamozhennuyh__postov_.pdf