Overview

overview

4

Static

static

4

6f8e730d07...0N.pdf

windows7-x64

3

6f8e730d07...0N.pdf

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    6f8e730d07cd4bfbc6a273db802f0a1379b00589a2c426e5fe5b0fc538055a20N

  • Size

    996KB

  • MD5

    ebe0c776ff57efcfcda9929f633a4aa0

  • SHA1

    08afbcaf9a41a8950c4c15235d8dea8993558415

  • SHA256

    6f8e730d07cd4bfbc6a273db802f0a1379b00589a2c426e5fe5b0fc538055a20

  • SHA512

    b02da0c48d113999b43d7fff23f58f5a6733ba47a25c47d2003bd6fd59b328947f23f5a455bb706a97ba817564bed692cf2ff9bd962d45c471d907660e2a6c6a

  • SSDEEP

    12288:xmPSlCybRTOIgrWnvTLhcQALvckVajrRuw2EP5j3XJPs5k/x17zQ8+INFoP:xllCylTvgryALv9ajrRuw9xXZDxdzQ8s

Score
4/10
pdflinkqr

Malware Config

Signatures

  • HTTP links in PDF interactive object 1 IoCs

    Detects HTTP links in interactive objects within PDF files.

    pdflink
  • PDF has QR code that contains a HTTP URL

    PDFs with URL QR codes are often used for phishing

    pdfqr
  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

    pdflink

Files

  • 6f8e730d07cd4bfbc6a273db802f0a1379b00589a2c426e5fe5b0fc538055a20N
    .pdf

    • http://undocs.org/A/68/372

    • http://undocs.org/A/68/585

    • http://undocs.org/A/69/360

    • http://undocs.org/A/69/417

    • http://undocs.org/ST/SGB/2003/7