Overview

overview

4

Static

static

4

fada4c4e01...dN.pdf

windows7-x64

3

fada4c4e01...dN.pdf

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fada4c4e01ea11428b65805998f8504450fcee4385fe177a98ad605d7f521b6dN

  • Size

    296KB

  • MD5

    0786dbdad054adb69bb63a667ff9be80

  • SHA1

    a9cbcd802baef0217ec0765b9046dc3454e07e9b

  • SHA256

    fada4c4e01ea11428b65805998f8504450fcee4385fe177a98ad605d7f521b6d

  • SHA512

    b25d82ca1766a0dad84aa4552968427a83cb463b9935cc56283dac4d6e5dbff8c16c007ac7fea0818a8ac1f1c482766fb492b17adbda04d023a365213dfd646b

  • SSDEEP

    6144:bDIdV7Nihwi4Q/8vCT4fWROBNpHviy8++EGxbOH:bDK7NihwgK7ImB8yJH

Score
4/10
pdflinkqr

Malware Config

Signatures

  • HTTP links in PDF interactive object 1 IoCs

    Detects HTTP links in interactive objects within PDF files.

    pdflink
  • PDF has QR code that contains a HTTP URL

    PDFs with URL QR codes are often used for phishing

    pdfqr
  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

    pdflink

Files

  • fada4c4e01ea11428b65805998f8504450fcee4385fe177a98ad605d7f521b6dN
    .pdf

    • http://undocs.org/A/66/53

    • http://undocs.org/A/66/53/Add.2

    • http://undocs.org/A/67/53

    • http://undocs.org/A/67/53/Add.1

    • http://undocs.org/A/68/53

    • http://undocs.org/A/68/53/Add.1

    • http://undocs.org/A/69/53

    • http://undocs.org/A/69/53/Add.1

    • http://undocs.org/A/70/489/Add.3

    • Show all