Behavioral task
behavioral1
Sample
4ab00369f06d6cce71fbff441020fab21b0117db3dcc1c5c26bf16ecebeb0a05N.pdf
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4ab00369f06d6cce71fbff441020fab21b0117db3dcc1c5c26bf16ecebeb0a05N.pdf
Resource
win10v2004-20241007-en
General
-
Target
4ab00369f06d6cce71fbff441020fab21b0117db3dcc1c5c26bf16ecebeb0a05N
-
Size
168KB
-
MD5
569502003737903e3e5596266bf402a0
-
SHA1
bee50eba33517533f01ae0d6c18abd5c5d048a07
-
SHA256
4ab00369f06d6cce71fbff441020fab21b0117db3dcc1c5c26bf16ecebeb0a05
-
SHA512
0e04a79d784bb7d53f28680743b10d8924f25af2d857642a1fc595db5c918206a5b45b73c057eb2cc16f82d695e6d384e9c8281e70c881e650630360a451e144
-
SSDEEP
3072:PxZBNHXP5+sD4cy4+sDrmdARL6lZKCJOf5YRsTbnq8sWxRCT69W1K8HVq4ZEpscA:JrpXP5+s/y4TWdCWKCJOhTbnt/xRk69O
Malware Config
Signatures
-
HTTP links in PDF interactive object 1 IoCs
Detects HTTP links in interactive objects within PDF files.
resource yara_rule sample pdf_with_link_action -
One or more email addresses in PDF identified
Detects presence of email addresses in PDF files.
Files
-
4ab00369f06d6cce71fbff441020fab21b0117db3dcc1c5c26bf16ecebeb0a05N.pdf
-
http://ABCNEWS.com
-
http://abcnews.com/pollingunit
-
http://abcnews.com/pollingunit.
-
http://abcnews.go.com/PollingUnit/story?id=5984818&page=1
-
http://langerresearch.com/
-
http://www.langerresearch.com/
-
mailto:[email protected]
-