General
-
Target
d3daa83eef7067773d2976dc50c81703_JaffaCakes118
-
Size
359KB
-
MD5
d3daa83eef7067773d2976dc50c81703
-
SHA1
4333f1678d3e768b3327c35724b99f8e39ab19d4
-
SHA256
053e581db7fa96034bf9b7eee49a1df8e0315fb0b9c1df7f7c8d64155d60f9cf
-
SHA512
30303c834cce8049f33a85d7a6d854eb74cc8530c55b60b96dad1451240e8d2da74987ccfe9686ca1392787b41b0d2fa338f56cec2782256d3f577f0c38b47e3
-
SSDEEP
6144:tebzINcwQIiXR0jzREOLmPvWkn3H3+hO3Xt7vrXQDWcGIXnKsN:tebUNcHIiXJnWY3Tt7vcaTWj
Malware Config
Signatures
-
One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
Files
-
d3daa83eef7067773d2976dc50c81703_JaffaCakes118
-
http://botcraftman.ru/?lip&keyword=%D0%B7%D0%B0%D0%B3%D0%BE%D0%B2%D0%BE%D1%80%D1%8B+%D1%81%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C+%D0%B1%D0%B5%D1%81%D0%BF%D0%BB%D0%B0%D1%82%D0%BD%D0%BE&charset=utf-8
-
http://img1.liveinternet.ru/images/attach/c/7//4809/4809463_raspisanie__avtobusov__telehanuy_.pdf
-
http://img1.liveinternet.ru/images/attach/c/7//4809/4809666_avtobus__moskva__kamuyshin_.pdf
-
http://img1.liveinternet.ru/images/attach/c/7//4809/4809691_nayti__vlyubitsya__i_.pdf
-