General

  • Target

    56412b9fcd1a072f9910831006896bed.zip

  • Size

    82KB

  • MD5

    f45088f40a69fbd18e44d667b6197592

  • SHA1

    6d6467d1467df5b24e462e9ffcd46d4f11cfda91

  • SHA256

    66718107be39d03095983bc83aa6fb9bdaaefd52753ad1eb7bb4a1ecb4bad7f5

  • SHA512

    bead893f96eff48c96a107852aaa0f743c3e1382d829f8e09dbaa2ac0ba6081817518234066b239051380d6c9c9fb5328cf5ea59fd377b8d90c4d630932d2031

  • SSDEEP

    1536:WHD1EEOD5/uD/QH26EOEb4x9JYdz6nxne2R+C6EDlbb1xV:WHQ5/uDq26pEbuwdEdpDlbh7

Score
3/10

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • 56412b9fcd1a072f9910831006896bed.zip
    .zip

    Password: infected

  • 7d007f613bea222e5f6f124b802ff8f168cfe815a6e5e58c2f0450d3078f7a81
    .pdf

    Password: infected

    • http://aimecostruzioni.it/userfiles/files/wunipos.pdf

    • http://anhuizpyy.com/upload_fck/file/2021-5-14/20210514201445562042.pdf

    • http://artside.org/data/temp/file/60344953938.pdf

    • http://clarkstownhs64.com/clients/2/25/255c49a504cbad61718694d8b78dfcdd/File/xowifinivuza.pdf

    • http://erfolgsapp.de/wp-content/plugins/formcraft/file-upload/server/content/files/160965f770f564---gosexifigixarapola.pdf

    • http://files.ibiza-ferien.de/file/40865963982.pdf

    • http://icsbc.ru/fuploader//file/27399366433.pdf

    • http://kamkmori.cz/ckfinder/userfiles/files/sogexavepevukusujimusir.pdf

    • http://lirealestatelitigator.com/wp-content/plugins/super-forms/uploads/php/files/0c5f0e587eb5a1d6144f76b0f5abf6df/26282360221.pdf

    • Show all