Overview

overview

4

Static

static

4

944a9ab833...7N.pdf

windows7-x64

3

944a9ab833...7N.pdf

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    944a9ab833f903ac18ac6e3790fcf757f5682f0eccdd32d749e14a4bbacc4237N

  • Size

    197KB

  • MD5

    c1331268962a81d1e692ee75a2a56160

  • SHA1

    5c12d9124d36f2807772b21bfae2e2e8f13e0598

  • SHA256

    944a9ab833f903ac18ac6e3790fcf757f5682f0eccdd32d749e14a4bbacc4237

  • SHA512

    80ce779eefc594c4f5879d7bb86047f3d20b85d55fd023b8ec89a1ce2d116eb4cf5a1b33d6ccccc531eab4b750683da2690a322a49283b21c43c2972e6ca80c8

  • SSDEEP

    6144:k5dD1EG8Oy1Y/1U+McfufoMyponchBerfrNrB:kf1EG8XuMHUBerfrNrB

Score
4/10
pdflinkqr

Malware Config

Signatures

  • HTTP links in PDF interactive object 1 IoCs

    Detects HTTP links in interactive objects within PDF files.

    pdflink
  • PDF has QR code that contains a HTTP URL

    PDFs with URL QR codes are often used for phishing

    pdfqr
  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

    pdflink

Files

  • 944a9ab833f903ac18ac6e3790fcf757f5682f0eccdd32d749e14a4bbacc4237N
    .pdf

    • https://undocs.org/A/RES/74/282

    • https://undocs.org/en/A/74/620

    • https://undocs.org/en/A/74/730

    • https://undocs.org/en/A/74/737/Add.6

    • https://undocs.org/en/A/74/910

    • https://undocs.org/en/A/RES/49/233

    • https://undocs.org/en/A/RES/56/292

    • https://undocs.org/en/A/RES/59/296

    • https://undocs.org/en/A/RES/60/266

    • Show all