General
-
Target
e1038ff5bf9236585aeac56957363c92_JaffaCakes118
-
Size
186KB
-
MD5
e1038ff5bf9236585aeac56957363c92
-
SHA1
cf430fcd0346519ad996d39621081ca0f766242d
-
SHA256
f8aaf6a7ab1a94ef40173547ff1c91127dafe928335fffa8eb3b9f13c1a0f925
-
SHA512
03dc64374be5dde731db352ca8494282d765aa7493e2447f1648988722f93857fc7d4ef750c29c080fe9b0df12cf89d54e612166dfd80562a6706cc57b0ec3dd
-
SSDEEP
3072:s2irbxzGAFYDMxud7fKg3dXVmbOn5uE6KjnnQw/NWIl5bfuEzUYQDKSD:s2MKlWQ7Sg3d4bOZQIl5b1e
Malware Config
Signatures
-
One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
Files
-
e1038ff5bf9236585aeac56957363c92_JaffaCakes118
-
http://botcraftman.ru/?lip&keyword=%D1%81%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C+%D0%B1%D0%B5%D1%81%D0%BF%D0%BB%D0%B0%D1%82%D0%BD%D0%BE+%D0%B4%D1%80%D0%B0%D0%B9%D0%B2%D0%B5%D1%80+%D0%BD%D0%B0+%D0%B7%D0%B2%D1%83%D0%BA+%D0%B4%D0%BB%D1%8F+windows+xp&charset=utf-8
-
http://fastpic.ru/
-
http://img0.liveinternet.ru/images/attach/c/6//4384/4384140_iata_koduy_gorodov.pdf
-
http://img0.liveinternet.ru/images/attach/c/6//4384/4384202_skachat_klesh_of_klens.pdf
-
http://img1.liveinternet.ru/images/attach/c/6//4383/4383787_triton_akvariumnuyy_soderzhanie.pdf
-
http://www.liveinternet.ru/click
-