General

  • Target

    d259adab3756a52e6c0671b80c86912e.zip

  • Size

    84KB

  • MD5

    a9afebdfc5447a8c0335963199fde589

  • SHA1

    910d0a2e8d910569a4a2648ecd6e4314c641f561

  • SHA256

    41aa848c8b49b738965a58f264f9e134dad951ad61ef3c03a888fbacfedc1c94

  • SHA512

    3ecbcc2a5add1a98fc3aba7a7aa4eaf72c9e3b2994201406898fc2e1192f38c7866a9266fa68824fab084dfedcf51b1cf33fb6195b8dac4cda3a41d81bc8faae

  • SSDEEP

    1536:B0VEdF67CGbTLCcTho37G5H5x4o5geA0BzR8MdhVb+FOIdT7QS6nv:eVEdF67CUXo3y5J5geAAzRrd/iLR7QSu

Score
3/10

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • d259adab3756a52e6c0671b80c86912e.zip
    .zip

    Password: infected

  • d8e89359c4820522c2aa20ccda90f1f9921b7d76d60fe7dd861f53c40f6d55a1
    .pdf

    Password: infected

    • http://bandbaajabarat.com/ci/userfiles/files/65076969254.pdf

    • http://barudan.hk/UploadFile/file/20210615211203596.pdf

    • http://csc-021.com/userfiles/file/20210629134737_911l4z.pdf

    • http://curry-box-deluxe.de/userfiles/file/befosuxekujanofakogudoko.pdf

    • http://multiseal.com.ph/wp-content/plugins/formcraft/file-upload/server/content/files/160878276824a3---25295988864.pdf

    • http://parkwestresidences.com/wp-content/plugins/formcraft/file-upload/server/content/files/1608008b566d26---vuretimudigawene.pdf

    • http://paulabenveniste.com/UserFiles/file/ripajonejutug.pdf

    • http://poltinik.ru/userfiles/file/97299282273.pdf

    • http://starma.pl/files/file/libiz.pdf

    • Show all