Overview

overview

4

Static

static

4

f9b8b8700e...eN.pdf

windows7-x64

3

f9b8b8700e...eN.pdf

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f9b8b8700e57d977e55403cf5a95eee09355b4b3862fe101fe18bdd0a547b2ceN.pdf

  • Size

    301KB

  • MD5

    982ba6e038db4da17bdb7b1cd8e27600

  • SHA1

    26234b17867cbec0c88c416ae9eb4f093bc1c711

  • SHA256

    f9b8b8700e57d977e55403cf5a95eee09355b4b3862fe101fe18bdd0a547b2ce

  • SHA512

    0ed87dc44c98ddf843c11fca54ef7acb98236655107fb45d9b8a174738410640b1d2dfddb0e09c4ddb986579b300b1eebb53178ff393302915d8b19d4dcf9627

  • SSDEEP

    6144:b+FRvUUdQ9mGMDNR8EMg3uOeRUQ5hdW02U9:yzvUD9mNDr8EMgeOeGQ5yq

Score
4/10
pdflinkqr

Malware Config

Signatures

  • HTTP links in PDF interactive object 1 IoCs

    Detects HTTP links in interactive objects within PDF files.

    pdflink
  • PDF has QR code that contains a HTTP URL

    PDFs with URL QR codes are often used for phishing

    pdfqr
  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

    pdflink

Files

  • f9b8b8700e57d977e55403cf5a95eee09355b4b3862fe101fe18bdd0a547b2ceN.pdf
    .pdf

    • http://14es-ES8es-ES.es

    • http://undocs.org/A/RES/70/148

    • http://undocs.org/sp/A/56/40

    • http://undocs.org/sp/A/68/53

    • http://undocs.org/sp/A/69/53

    • http://undocs.org/sp/A/70/271

    • http://undocs.org/sp/A/70/371

    • http://undocs.org/sp/A/70/489/Add.2

    • http://undocs.org/sp/A/70/53

    • Show all