General

  • Target

    0cbf2e88a4e215c886411ffba239a87d.zip

  • Size

    80KB

  • MD5

    fc0b908a8e04d634c60eb2e009dc0969

  • SHA1

    18c79f47892dd477e0aed0b8b70e72b32c99289d

  • SHA256

    dbcae299bf557157caf72eb76d8711a285d5995e270dffd1ef521c7f4a907834

  • SHA512

    fc2c917a14c0200b7e9f2b924abb9db739d8ae5fbc8841b23e208144f9261e242f5656f87cdd88612a4adb1ab1a69e9a0a19b389a247641d310f38cc8f82d744

  • SSDEEP

    1536:pAhh85TuGtF4Re6xrE8OIsMVFvYkKGWSfqEhZSco5YabB3MG6Se56Mhl:pRu2GReRIsuFvLKGXqASco5DbB3MCe5F

Score
3/10

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • 0cbf2e88a4e215c886411ffba239a87d.zip
    .zip

    Password: infected

  • abfa42b887190089d816d63c3e889024574b1f566c19af066e847b23aedf0ebb
    .pdf

    Password: infected

    • http://adance0112.com/upfile/editor/file/83874698989.pdf

    • http://burragebrothers.net/demo/jolie/beta/userfiles/files/xukonorasixe.pdf

    • http://falconfam.com/ckfinder/userfiles/files/17475560815.pdf

    • http://joltiy.ru/uploads/files/xenovigu.pdf

    • http://koreadramatour.com/FileData/ckfinder/files/20210815_2C2DA0ADD429BD44.pdf

    • http://old.smartplus.pl/ckfinder/userfiles/files/jorosawomazij.pdf

    • http://uyaviation.com/wp-content/plugins/formcraft/file-upload/server/content/files/1609fff493e079---daguwifepobifap.pdf

    • http://vertracapital.com/uploads/files/43289557006.pdf

    • http://www.stockholmswingallstars.com/wp-content/plugins/formcraft/file-upload/server/content/files/160fee2ef95590---likug.pdf

    • Show all