General

  • Target

    6ed9c58fb93445715414a3fa31114bd6.zip

  • Size

    73KB

  • MD5

    0405cd60ba02b06c5c001a46080abd4a

  • SHA1

    7e1e81cdc2134bf7224db5eb165ddc7eebe37d60

  • SHA256

    d784755cea0534f1e46df290f1d10d1060bc8e9378ac88f56a22faf449bbeafc

  • SHA512

    a5e1eb9ad72948600985f954d2be63c1c0a3093480032680f802eea6e27b04e91a7b2430720b9e51fe14d1d81c16498514f9a84273965ec4dae2f1657740aafc

  • SSDEEP

    1536:9XTfWzf1+V+TCOo9nySgOhQ4THe3WU7zvZW9uryZVSWsTt2IdIx:FfWzcVANUyS/hQ4iGOZW9umZSTt2I6x

Score
3/10

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • 6ed9c58fb93445715414a3fa31114bd6.zip
    .zip

    Password: infected

  • 7340e66ca0a0e60e170f87445caf050736b8175ee2c5998f8009e05ce0fdb5f7
    .pdf

    Password: infected

    • http://archerelectricsupply.com/userfiles/file/barepu.pdf

    • http://mitchelllawoffice.com/customer/3/d/9/3d947ad6ce2568d98b832ccf5548371bFile/tikeluxopusodunumimu.pdf

    • http://neodev.space/wp-content/plugins/formcraft/file-upload/server/content/files/1609529f3e9b39---22812791118.pdf

    • http://www.bewegeninarnhem.nl/wp-content/plugins/formcraft/file-upload/server/content/files/160a8a8c967efb---86779240915.pdf

    • http://www.fliesen-brill.de/wp-content/plugins/formcraft/file-upload/server/content/files/160d989372cfdb---zotilomaxafuf.pdf

    • http://www.jimenez-casquet.com/wp-content/plugins/formcraft/file-upload/server/content/files/1608c9e1128f76---xizetajodafivov.pdf

    • http://www.molinoag.com/wp-content/plugins/formcraft/file-upload/server/content/files/16081ec82cd7d0---jonukamuvajaluzilebobi.pdf

    • http://www.uvhk.com/wp-content/plugins/formcraft/file-upload/server/content/files/160c9f5faba3ab---43160610336.pdf

    • https://almentispharma.com/ckfinder/userfiles/files/dikuxozijanubopob.pdf

    • Show all