Overview

overview

4

Static

static

4

0ff8b534a5...4N.pdf

windows7-x64

3

0ff8b534a5...4N.pdf

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0ff8b534a5720ecdfe3cd7ef7c3070bc064692c2aec4a9b0f24752f8564927e4N

  • Size

    153KB

  • MD5

    11f5a6aa0ddd10d1e60d3157a4a93ce0

  • SHA1

    4fbeb26674a9423719eb0070d641130f041a2924

  • SHA256

    0ff8b534a5720ecdfe3cd7ef7c3070bc064692c2aec4a9b0f24752f8564927e4

  • SHA512

    ba5ba6ea3e1bf72922ab55273673c9aae36c1d9976ff13ab6bd1875564f762151cb5308aab87ea3b8deec3977b71a9977a01a1414245b4f2fa3aa551b98f0586

  • SSDEEP

    3072:/WvqQ1rILkPfeEvgq0ApBvqtABZDdL4x7SqX:/I1lnuWvqtAB4j

Score
4/10
pdflinkqr

Malware Config

Signatures

  • HTTP links in PDF interactive object 1 IoCs

    Detects HTTP links in interactive objects within PDF files.

    pdflink
  • PDF has QR code that contains a HTTP URL

    PDFs with URL QR codes are often used for phishing

    pdfqr
  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

    pdflink

Files

  • 0ff8b534a5720ecdfe3cd7ef7c3070bc064692c2aec4a9b0f24752f8564927e4N
    .pdf

    • https://undocs.org/A/C.3/76/L.63

    • https://undocs.org/en/A/76/16

    • https://undocs.org/en/A/76/250

    • https://undocs.org/en/A/RES/75/243