Overview

overview

4

Static

static

4

test3.pdf

windows11-21h2-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    test3.pdf
  • Size 379KB
  • Sample260731-18ldbasdla
  • SHA256 e4fab7885825dee7b3691a5a44dcfaa7eec77b98bf7fa9e60333149cab282759
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
4/10
pdflink

Malware Config

Signatures

  • HTTP links in PDF interactive object 1 IoCs

    Detects HTTP links in interactive objects within PDF files.

    pdflink
  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

    pdflink

File Explorer

  • test3.pdf
    .pdf 379KB

test3.pdf

  • SHA256 e4fab7885825dee7b3691a5a44dcfaa7eec77b98bf7fa9e60333149cab282759
  • MD5 SHA1 SHA512 SSDEEP TLSH

  • HTTP links in PDF interactive object

    Detects HTTP links in interactive objects within PDF files.

    pdflink

Extracted URLs

  • file http://clientnode.example.com

  • file http://registry.ccess.redhat..com

  • file http://servernode.example.com

  • file http://vault.centos.org/$contentdir/$releasever/AppStream/$basearch/os/

  • file http://vault.centos.org/$contentdir/$releasever/BaseOS/$basearch/os/

  • file http://vault.centos.org/$contentdir/$releasever/BaseOS/$basearch/os/fr-FR