General
-
Target
eb6dbe7b91d58a6272c2c94eceee437d_JaffaCakes118
-
Size
355KB
-
MD5
eb6dbe7b91d58a6272c2c94eceee437d
-
SHA1
3a08f3f55b6c1239273a70b68f73b8c06f531670
-
SHA256
e61165017d6076b2dcb2228ab16753c6722fe3b79fdc6c65ee3cb40217eda242
-
SHA512
b29ac2e0174a2fe61f7a121ee206c595653a39c5b2d17ce7b6c3ee264416e7ca3bf241b587867a28344c042730633e72a35e5903add79b3b078fd099d8b033ea
-
SSDEEP
6144:Tq+jc4MhCByOSfuSwAh58xJLylJ/4XQ48zo6vqVjLXcS4E/:2X4m/x6s3QXQZhyV/sc
Malware Config
Signatures
-
One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
Files
-
eb6dbe7b91d58a6272c2c94eceee437d_JaffaCakes118
-
http://botcraftman.ru/?lip&keyword=%D0%BC%D0%B0%D0%B9%D0%BD%D0%BA%D1%80%D0%B0%D1%84%D1%82+1+5+2+%D0%B8%D0%B3%D1%80%D0%B0%D1%82%D1%8C+%D0%BE%D0%BD%D0%BB%D0%B0%D0%B9%D0%BD&charset=utf-8
-
http://img0.liveinternet.ru/images/attach/c/7//4802/4802371_shema__ultrazvukovogo_.pdf
-
http://img0.liveinternet.ru/images/attach/c/7//4802/4802373_windows__7__torrent_.pdf
-
http://img0.liveinternet.ru/images/attach/c/7//4802/4802382_russkaya__vyaz_.pdf
-