Overview

overview

4

Static

static

4

0b721a507b...0N.pdf

windows7-x64

3

0b721a507b...0N.pdf

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    0b721a507b20320d658a4e933813ed7faa8877214409916d117b93edab503fe0N

  • Size

    555KB

  • MD5

    63090d7e8fb2c3ebeb77af1a34867d00

  • SHA1

    2d36fa61cb3da3707c5e5c2aa03e116d62eb52c8

  • SHA256

    0b721a507b20320d658a4e933813ed7faa8877214409916d117b93edab503fe0

  • SHA512

    b59ad398afee7ad1ebdcaffbff5c6611bec98f8d811a969138bdded192a0382307f92a1d53e718b0198bb37a1cb07afca1a0fe6ac84860f04ef21c756b78eac1

  • SSDEEP

    12288:I+MwJYB+4navHDuh3TnjpQmq3K5vv6Q8c3l6M4W8qO3Xb:BC+/D6KeCQ8c3l8WPOb

Score
4/10
pdflinkqr

Malware Config

Signatures

  • HTTP links in PDF interactive object 1 IoCs

    Detects HTTP links in interactive objects within PDF files.

    pdflink
  • PDF has QR code that contains a HTTP URL

    PDFs with URL QR codes are often used for phishing

    pdfqr
  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

    pdflink

Files

  • 0b721a507b20320d658a4e933813ed7faa8877214409916d117b93edab503fe0N
    .pdf

    • http://undocs.org/A/73/654

    • https://undocs.org/A/71/819

    • https://undocs.org/A/71/836/Add.8

    • https://undocs.org/A/RES/71/299

    • https://undocs.org/S/RES/2149(2014)

    • https://undocs.org/S/RES/2301(2016)

    • https://undocs.org/S/RES/2387(2017)