General
-
Target
d6ea330cfbf6c85a168157f62293f0b2_JaffaCakes118
-
Size
185KB
-
MD5
d6ea330cfbf6c85a168157f62293f0b2
-
SHA1
683fb6cd5aab8afe5e09cead5eea2e83c9aa3dbe
-
SHA256
3d0f4db13c96996139f92f6f663a25606ff36c52ae5a43aa97f812de80a1d21b
-
SHA512
8ef144c852defaacd6e12ca21236f0930bfbe988e7361e9991719b90a78b8cb561c78a1fb28f74c0b55d6bed29af22d96f1666aecce1662b3e95fab9fc9fdb03
-
SSDEEP
3072:d2irbxzGAFYDMxud7fKg3dXVmbOn5us6Kjni2UKMehfha5568CNUYSb:d2MKlWQ7Sg3d4bOZi2Yehc5TL
Malware Config
Signatures
-
One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
Files
-
d6ea330cfbf6c85a168157f62293f0b2_JaffaCakes118
-
http://botcraftman.ru/?lip&keyword=%D1%81%D0%B2%D0%B0%D1%82%D1%8B+2+%D1%81%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C+%D1%82%D0%BE%D1%80%D1%80%D0%B5%D0%BD%D1%82&charset=utf-8
-
http://fastpic.ru/
-
http://img0.liveinternet.ru/images/attach/c/6//4384/4384259_nokia_n8_proshivka_android.pdf
-
http://img1.liveinternet.ru/images/attach/c/6//4383/4383805_skachat_warhammer_40000_fire_warrior_torrent.pdf
-
http://img1.liveinternet.ru/images/attach/c/6//4383/4383903_kveyk_4_skachat_torrenta.pdf
-
http://www.liveinternet.ru/click
-