General

  • Target
    _RECIBO-JUFO0398_87209ZIGOX.iso
  • Size 5.1MB
  • Sample260804-zz4mvsha64
  • SHA256 912a7ff8c57efab5a6e8140ffe6e1fa175df9cc6e3116b0e682e3cdc370b6b7f
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • Malformed data in PDF

    A PDF can contain malformed data to evade detection

  • PDF has QR code that contains a HTTP URL

    PDFs with URL QR codes are often used for phishing

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

  • One or more email addresses in PDF identified

    Detects presence of email addresses in PDF files.

File Explorer

  • _RECIBO-JUFO0398_87209ZIGOX.iso
    .iso 5.1MB
  • out.iso
    .iso 5.1MB
  • _28464Valid-9157341072_ECJOSXInstZGQB.vbs
    4.4MB
  • ~/exvbz/apdg/lbjeh/hlkjt/bruucl10.pdf
    .pdf 30KB
  • ~/exvbz/apdg/lbjeh/hlkjt/cgxio2.pdf
    .pdf 30KB
  • ~/exvbz/apdg/lbjeh/hlkjt/eeaelz6.pdf
    .pdf 37KB
  • ~/exvbz/apdg/lbjeh/hlkjt/fqqi1.pdf
    .pdf 24KB
  • ~/exvbz/apdg/lbjeh/hlkjt/lxyfnz5.pdf
    .pdf 25KB
  • ~/exvbz/apdg/lbjeh/hlkjt/nzcz7.pdf
    .pdf 1KB
  • ~/exvbz/apdg/lbjeh/hlkjt/opuaf4.pdf
    .pdf 24KB
  • ~/exvbz/apdg/lbjeh/hlkjt/povmv9.pdf
    .pdf 26KB
  • ~/exvbz/apdg/lbjeh/hlkjt/sopdv8.pdf
    .pdf 37KB
  • ~/exvbz/apdg/lbjeh/hlkjt/xidxl3.pdf
    .pdf 30KB
  • ~/vcuhi1.xml
    .dll 21KB
  • ~/xxzin2.xml
    .dll 41KB

_RECIBO-JUFO0398_87209ZIGOX.iso

  • SHA256 912a7ff8c57efab5a6e8140ffe6e1fa175df9cc6e3116b0e682e3cdc370b6b7f
  • MD5 SHA1 SHA512 SSDEEP TLSH