General

  • Target

    70d078d4947a942962d0059663fa6fcd.zip

  • Size

    77KB

  • MD5

    0b56e41088b6353c3435065ece7dc828

  • SHA1

    4cef232705883a9be96c1d26a4218116fe9a1f3c

  • SHA256

    9f87dc3f39983ae20ef79f8dbae11e97bf82135fb8f32f2f3198fb0a565414af

  • SHA512

    08691ddf2880549a135dd948b36bf519cac4d1995f9e751e1ba234ee385f1b8108c63ec4b7a12870975a7e1a082a524df4efbf34dca73399c22a5a0d290055a9

  • SSDEEP

    1536:PdrPzsoNBwhKSFySWj134/7r8drWwHqTAHBT9f/oE4DBZZi2Tkcb:PdP/Sq5G7r8Ibu3WDU+pb

Score
3/10

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • 70d078d4947a942962d0059663fa6fcd.zip
    .zip

    Password: infected

  • 064526a13ac9ebe7426ad8ca7220f46302eb48fc1511d2127723551372dc4c19
    .pdf

    Password: infected

    • http://01host.ru/userfiles/files/nivif.pdf

    • http://dsagco.com/Upload/file/60168632805.pdf

    • http://fslawoffice.com/customer/3/d/9/3d947ad6ce2568d98b832ccf5548371bFile/96306283861.pdf

    • http://kripasec.com/userfiles/file/80227395292.pdf

    • http://mkpstroitel.ru/upload/files/65827173180.pdf

    • http://msslink.ru/userfiles/files/97825392391.pdf

    • http://www.hj-bouwt.be/wp-content/plugins/formcraft/file-upload/server/content/files/1613f838f6867b---fofefalazejubiwesoperi.pdf

    • http://www.polni.si/Images/files/23562830567.pdf

    • http://xatrbio.com/userfiles/file/ratavalerepuriletef.pdf

    • Show all