Red_Lotus_Tome_I[.]pdf

Sharing

Copy URL Twitter E-mail

General

Target
Red_Lotus_Tome_I.pdf
Size 8.6MB
Sample260701-vef9lsct3t
SHA256 7a35e0e034599978bac723d2b653d4e8fb96840a7e12f0dfecb275aa4fd016e3
MD5 9ae69f82ba223fa1a5429bc7b317b091
SHA1 dad62faab19fd9cf58f9fc480fd7ff5ff67e238d
SHA512 ff826b75b464969934e682e6930667ec43516c9e3625e93f378c25922596542a02b8d780a9c205b7627e62b1a6a50cde1f070911bca7fbfeb800c9fbd2bcf0e6
SSDEEP 196608:5bhWdy7OMl/dVEphEhhKrZ9exLrk8V1N0B:5bcy7Oat6ZIr30B
TLSH
T144963398DCC6D4ECE987C0729B3769D5AF9CB067B98B2801147E42496901738E683FDF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

pdf link

Malware Config

Signatures

One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
pdf link

File Explorer

Red_Lotus_Tome_I.pdf

.pdf 8.6MB

Red_Lotus_Tome_I.pdf

SHA256 7a35e0e034599978bac723d2b653d4e8fb96840a7e12f0dfecb275aa4fd016e3
MD5 9ae69f82ba223fa1a5429bc7b317b091
SHA1 dad62faab19fd9cf58f9fc480fd7ff5ff67e238d
SHA512 ff826b75b464969934e682e6930667ec43516c9e3625e93f378c25922596542a02b8d780a9c205b7627e62b1a6a50cde1f070911bca7fbfeb800c9fbd2bcf0e6
SSDEEP 196608:5bhWdy7OMl/dVEphEhhKrZ9exLrk8V1N0B:5bcy7Oat6ZIr30B
TLSH
T144963398DCC6D4ECE987C0729B3769D5AF9CB067B98B2801147E42496901738E683FDF
MD5 SHA1 SHA512 SSDEEP TLSH

Extracted URLs

file https://cdn.discordapp.com/attachments/1014632218183860334/1014637785694621706/journal-tool.exe
file https://cdn.discordapp.com/attachments/1081265285899747388/1096111827047428197/EDDv310.exe
file https://cdn.discordapp.com/attachments/1083164927696588921/1106689460202123304/WatsonAltChecker.ps1
file https://cdn.discordapp.com/attachments/1083164927696588921/1140744067077120110/RedLotus_DFIR.zip
file https://cdn.discordapp.com/attachments/1086389114577895545/1086392746090168380/WinPrefetch_Powershell.ps1
file https://cdn.discordapp.com/attachments/1086704031826722877/1099092052114939924/DDoS_Event_Logs.txt
file https://cdn.discordapp.com/attachments/1095072783068827769/1106683442105688084/message.txt
file https://cdn.discordapp.com/attachments/926545068230344714/1078495196846772365/Mecha.exe
file https://cdn.discordapp.com/attachments/998317595855966550/1052244510488412160/INDXRipper-5.2.7-py3.9-amd64.zip
file https://d1kpmuwb7gvu1i.cloudfront.net/AccessData_FTK_Imager_4.7.1.exe
file https://discord.gg/7ndVQbBQQf
file https://discord.gg/KBxT27kyzy
file https://discord.gg/redlotus
file https://docs.google.com/document/d/122TiEwUsyAUPXGrMHQZkhtTiN3C0t4PU_79Vql1VAKE/edit?usp=sharing
file https://e-z.bio/unmonsieur
file https://ericzimmerman.github.io/#!index.md
file https://github.com/Amadeus411/Red-Lotus-buster/releases/tag/Minecraft
file https://github.com/RRancio/777
file https://github.com/RRancio/Exec/raw/main/Files/DDFO.exe
file https://github.com/RRancio/Exec/raw/main/Files/Unicode.exe
file https://github.com/RRancio/Exec/raw/main/Files/maceta.exe
file https://github.com/RRancio/GlobalLister
file https://github.com/SherlockHolmesv/RedLotusFREE/releases/tag/RedLotusDFIR
file https://github.com/SherlockHolmesv/RedLotus_ModAnalyzerFREE/releases/tag/Minecraft
file https://github.com/SherlockHolmesv/SherlockSignatureChecker/releases/tag/DFIR
file https://github.com/harelsegev
file https://github.com/nay-cat/dpsanalyzer/releases/tag/1.3
file https://github.com/nay-cat/fuckbuggers/releases/download/v1.5/DebuggerFinder.exe
file https://github.com/ponei/JournalTrace/releases
file https://hide.me/en/
file https://learn.microsoft.com/en-us/sysinternals/downloads/strings
file https://nordlayer.com/business-vpn-special-offer/?utm_campaign=off563&utm_content=&utm_medium=affiliate&utm_source=aff3013&utm_term=
file https://prnt.sc/7psv-k0BT6jd
file https://prnt.sc/824LSqKB6af3
file https://prnt.sc/cf0W7ufV1YgW
file https://streamable.com/huvulg
file https://streamable.com/rm6jv2
file https://streamable.com/sujwel
file https://streamable.com/vejke3
file https://www.osforensics.com/download.html
file https://www.radmin-vpn.com/
file https://www.urban-vpn.com/
file https://www.youtube.com/watch?v=NlVHcsKMFf8
file https://www.youtube.com/watch?v=v28Tjz6QGq4
file https://youtu.be/-YzoEKE_7hg
file https://youtu.be/DgDgM4cSIeE
file https://youtu.be/KITyVcKuyVE
file https://youtu.be/Q6YcMve4nqA
file https://youtu.be/SCUJDr_S7aY
file https://youtu.be/W2nCRMyGUvE
file https://youtu.be/YspqX6XY4Bs
file https://youtu.be/bjJr-E23XbE
file https://youtu.be/eFuRSGniZNk
file https://youtu.be/gPeyggNLNzU
file https://youtu.be/jLKv2TmIsjk
file https://youtu.be/m0EroBBjhEI
file https://youtu.be/o0aOYvgSflE
Show all