General
-
Target
13d8f11c5b80158cc48a3d76681568b3_JaffaCakes118
-
Size
65KB
-
MD5
13d8f11c5b80158cc48a3d76681568b3
-
SHA1
e6c1746a65d07404e3d8f0770669ea4ae25c5af6
-
SHA256
e759f5b5699abff670107b481603f3850f23b78ce9253b5afa549d5ec54fb5b1
-
SHA512
e9437e3264de561b244f2ac44acf9eebcd20645add1117bbfaf95fdb31d4bcb56a25f5c6df0ad8242b2423370e9ae8c297e2732a9019f41dd7e31d62a36036fd
-
SSDEEP
1536:gbMFkIBYDDOsSIRYQB88tM/2jcVpZVpvFZHE0E:/BMbhRrB8OQVpZVhFZHw
Malware Config
Signatures
-
One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
Files
-
13d8f11c5b80158cc48a3d76681568b3_JaffaCakes118
-
http://baigeleather.com/userfiles/file/kipoxuwavinuxiza.pdf
-
http://birons.net/wp-content/plugins/super-forms/uploads/php/files/7c440e0e837c2e7db827df0f5cc10ba1/4890989097.pdf
-
http://southportrubbish.com/wp-content/plugins/formcraft/file-upload/server/content/files/160710d6f0dbc3---bovajunugun.pdf
-
http://uniondeautoescuelas.com/wp-content/plugins/formcraft/file-upload/server/content/files/16084620319312---89796302077.pdf
-
http://www.kidnuri.com/wp-content/plugins/formcraft/file-upload/server/content/files/1607f3de84499c---84853334697.pdf
-
https://feedproxy.google.com/~r/skout/mBVl/~3/1KS0DP0cxss/uplcv?utm_term=arcserve+udp+6.+5+installation+guide
-
https://gmonlinestore.com/wp-content/plugins/formcraft/file-upload/server/content/files/160905b366b807---60502690741.pdf
-
https://husvagnsexpo.se/wp-content/plugins/formcraft/file-upload/server/content/files/1608357fd43665---44697238213.pdf
-
https://kantankacreative.com/wp-content/plugins/super-forms/uploads/php/files/18a1eac81564cab93b858ca8885fa1a3/57322765896.pdf
- Show all
-