Overview

overview

4

Static

static

4

f2421cf8d4...eN.pdf

windows7-x64

3

f2421cf8d4...eN.pdf

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f2421cf8d472ea2bfdd4c8518282b4f0f5ea1cb04bf0db9084984e0405c819deN

  • Size

    225KB

  • MD5

    76d647a26dc675cab5a1057f61909e40

  • SHA1

    80f19d05bded404e39a450b0d87b151b93348ca7

  • SHA256

    f2421cf8d472ea2bfdd4c8518282b4f0f5ea1cb04bf0db9084984e0405c819de

  • SHA512

    a76420fe0fa08cdcabafa9b82c656d89017f3a42fb640fb0ae8c65f6e87233a6c79e3b424b9a364d5c27acd285444eb64d176d3b1869ba06bb71746e6b28d117

  • SSDEEP

    6144:r8+FF1OawgBmUUhT91sPd4Q6ymjtFOeDI3:rpPgPZ04MmjtFOwI

Score
4/10
pdflinkqr

Malware Config

Signatures

  • HTTP links in PDF interactive object 1 IoCs

    Detects HTTP links in interactive objects within PDF files.

    pdflink
  • PDF has QR code that contains a HTTP URL

    PDFs with URL QR codes are often used for phishing

    pdfqr
  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

    pdflink

Files

  • f2421cf8d472ea2bfdd4c8518282b4f0f5ea1cb04bf0db9084984e0405c819deN
    .pdf

    • http://undocs.org/A/66/116

    • http://undocs.org/A/68/172

    • http://undocs.org/A/71/517

    • http://undocs.org/A/C.6/63/SR.16

    • http://undocs.org/A/C.6/66/SR.16

    • http://undocs.org/A/C.6/68/SR.16

    • http://undocs.org/A/C.6/71/SR.18

    • http://undocs.org/A/RES/63/124

    • http://undocs.org/A/RES/66/104

    • Show all