Report - 77.pdf

PDF Suspicious Link PDF
ScreenShot
Created 2023.09.05 08:36 Machine s1_win7_x6401
Filename 77.pdf
Type PDF document, version 1.4
AI Score Not founds Behavior Score
1.0
ZERO API file : clean
VT API (file)
md5 7ddcbc65baca69173e41c8681deca383
sha256 8f3762364a95ac16f1fb66e26957d78130636a5043985d3fca9a1263d03c2ef3
ssdeep 768:P3HWOTxlHsRUIuemyObCTxPoVLUGpQ0lKCpzAE5gikRHdCcb7nodVaRck3TWGKQJ:/Hxi1GYRqyfIxIeux0jXq33Kx3w
imphash
impfuzzy
  Network IP location

Signature (1cnts)

Level Description
danger Connects to an IP address that is no longer responding to requests (legitimate services will remain up-and-running usually)

Rules (2cnts)

Level Name Description Collection
warning PDF_Suspicious_Link_Z PDF Suspicious Link binaries (upload)
notice PDF_Format_Z PDF Format binaries (upload)

Network (0cnts) ?

Request CC ASN Co IP4 Rule ? ZERO ?

Suricata ids



Similarity measure (PE file only) - Checking for service failure