Overview

overview

4

Static

static

4

272fd86d77...2N.pdf

windows7-x64

3

272fd86d77...2N.pdf

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    272fd86d77039a38db03ce50be2a7737d0da1d23c4856e19b5a940685edbe2b2N

  • Size

    231KB

  • MD5

    268107e53a7a526d137f92a050799560

  • SHA1

    348f19dff614c2a088ae09a31780a5fec38478f8

  • SHA256

    272fd86d77039a38db03ce50be2a7737d0da1d23c4856e19b5a940685edbe2b2

  • SHA512

    5f9c01025de3e8ad4d6df041f7f07de04fd544debf9ff01adf4666948caf0c5669b6df35ee6fe69488903248c4bd47d1b696eda203720e7fda934d072ccecdbd

  • SSDEEP

    6144:ayp+FrseH2fWGAfS9tCSgKKBwIvTefVs8XQak:mCW2fWst/0TsVpXS

Score
4/10
pdflinkqr

Malware Config

Signatures

  • HTTP links in PDF interactive object 1 IoCs

    Detects HTTP links in interactive objects within PDF files.

    pdflink
  • PDF has QR code that contains a HTTP URL

    PDFs with URL QR codes are often used for phishing

    pdfqr
  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

    pdflink

Files

  • 272fd86d77039a38db03ce50be2a7737d0da1d23c4856e19b5a940685edbe2b2N
    .pdf

    • http://undocs.org/E/RES/2017/26

    • https://undocs.org/A/RES/70/1

    • https://undocs.org/A/RES/71/161

    • https://undocs.org/E/2017/77