General

  • Target

    fa42af39ca8080318171989509b548db_JaffaCakes118

  • Size

    187KB

  • MD5

    fa42af39ca8080318171989509b548db

  • SHA1

    fd64da2a2faa72043fe1cc3649c5776f12a57d3b

  • SHA256

    bad7eae6542cefffa8d5223735fbcffbd470346812affdc80d93b3e3e23c9269

  • SHA512

    b65b69fa2b0b783a17ecdc2026c8eb779aa6d27a858983e03bd2d62abbf45042fce449b518a1b41591c57363d0d4c55c4ee4f23e9036774435ac8def1e258891

  • SSDEEP

    3072:N2irbxzGAFYDMxud7fKg3dXVmbOn5u66KjnnQjRBIjJobh82IMaeyUQWSo:N2MKlWQ7Sg3d4bO3Qr6Yj5

Score
3/10

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • fa42af39ca8080318171989509b548db_JaffaCakes118
    .pdf
    • http://botcraftman.ru/?lip&keyword=%D0%B3%D0%B4%D0%B7+%D0%BF%D0%BE+%D1%80%D1%83%D1%81%D1%81%D0%BA%D0%BE%D0%BC%D1%83+%D1%8F%D0%B7%D1%8B%D0%BA%D1%83+%D0%B4%D0%BB%D1%8F+%D0%BF%D0%BE%D1%81%D1%82%D1%83%D0%BF%D0%B8%D0%B2%D1%88%D0%B8%D1%85+%D0%B2+%D0%B2%D1%83%D0%B7%D1%8B+%D1%80%D0%BE%D0%B7%D0%B5%D0%BD%D1%82%D0%B0%D0%BB%D1%8C&charset=utf-8

    • http://fastpic.ru/

    • http://img0.liveinternet.ru/images/attach/c/5//4200/4200671_top_luchshih_programm_dlya_android.pdf

    • http://img1.liveinternet.ru/images/attach/c/5//4203/4203652_pley_market_skachat_dlya_nokia_603.pdf

    • http://img1.liveinternet.ru/images/attach/c/5//4211/4211424_prinuditelnaya_feminizaciya_porno_rasskazuy.pdf

    • http://www.liveinternet.ru/click