General
-
Target
dd970c8ee69ce1b31c86a653eed4d4ec19f1c3ee5e81f69c7c18cd9d4bdfbae8.zip
-
Size
170KB
-
MD5
ab3a36e2268b66c3b3b76b539de96401
-
SHA1
b622a8d3279cd1a8d90baa62e0c82c8a7a543d7e
-
SHA256
dd970c8ee69ce1b31c86a653eed4d4ec19f1c3ee5e81f69c7c18cd9d4bdfbae8
-
SHA512
3a55f02ab7e73fa0ada64fbce343d2ecb00523486d7e8fb68b4924fdf6cccab7bd611d0563692441c2b0b597acdfa84f7009463ad1a827ab46c2273ff6350252
-
SSDEEP
3072:IO2763sVbJIwkxYGKFkStSgMHkVuF/ii+ewsl1iNst21fG+9Lol:b2763sVboxYG4IgMHkVnewi1tEHQ
Malware Config
Signatures
-
One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
Files
-
dd970c8ee69ce1b31c86a653eed4d4ec19f1c3ee5e81f69c7c18cd9d4bdfbae8.zip
Password: infected
-
bc96c385d77be91bd7afd0a237ab0159eee81a2c8f39704db41b6dadfeae10f7.pdf
-
https://gogogoogogogogyokbisah100.gleeze.com/paypal.com-servicedaccountapps.com-Login.phpsslchanneltruesessionidJwwOGvf143kaxsfMdswaSYR1GVOgl6mfPSMEwiTyAxa49xm9491303JWR6iXsxMlkqRCkqdRjYWswjBA%20(1).php
-
https://www.amazon.com/gp/r.html?C=36NDAS4AOEHUQ&K=3FG275ABC0MAF&M=urn:rtn:msg:20190723080828b18f2893d4354ab8ae49f6dddd00p0na&R=1QXH2TPL0JMEF&T=C&U=https%3A%2F%2Fwww.amazon.com%2Fprimeinsider%3Fref%3Dprime_welcomeemail_header_primeinsider%26ref_%3Dpe_2617090_411372550&H=75LDSC5AIGZALMW4L80JDO9CAAEA&ref_=pe_2617090_411372550
-
https://www.amazon.com/gp/r.html?C=36NDAS4AOEHUQ&K=3FG275ABC0MAF&M=urn:rtn:msg:20190723080828b18f2893d4354ab8ae49f6dddd00p0na&R=3619LP6U8SGH1&T=C&U=https%3A%2F%2Fwww.amazon.com%2Fgp%2Fprimecentral%3Fie%3DUTF8%26ref_%3Dpe_2617090_411372550_prime_welcomeemail_header_primecentral&H=J2FCBFR4XR35CFBGE8JVKCFWA20A&ref_=pe_2617090_411372550_prime_welcomeemail_header_primecentral
-
https://www.amazon.com/gp/r.html?C=36NDAS4AOEHUQ&K=3FG275ABC0MAF&M=urn:rtn:msg:20190723080828b18f2893d4354ab8ae49f6dddd00p0na&R=N3E2O5M48NF5&T=C&U=https%3A%2F%2Fwww.amazon.com%2Fgp%2Fr.html%3FR%3D3Q89S9WPYQKE1%26C%3D34CK02N83LOW3%26H%3DV2OSSYP38N9EZJ2BJWPJTU6EQ8AA%26T%3DTC%26U%3Dhttp%253A%252F%252Fwww.amazon.com%252Fgp%252Fgoldbox%252Fref%253Dpe_0_3436_pe_todaysdeal%252F%26ref_%3Dpe_2617090_411372550&H=AAMGHOF9T0YAUCI6WDZDCUIFXWQA&ref_=pe_2617090_411372550
-