General

  • Target

    49df78cc9cd8e744e2c2260d088a0af79080fbd003491b962530ce7f21509f95

  • Size

    1.4MB

  • MD5

    0768e8d08a92288d3b5b6a14f7761a89

  • SHA1

    109f93847b764828950d5146419615752649afea

  • SHA256

    49df78cc9cd8e744e2c2260d088a0af79080fbd003491b962530ce7f21509f95

  • SHA512

    6e17ab73720c610d91573bc63d770e0d3cd095f3f025b901b1ccac4f61a8dc8509c4fde8d4957998d3ba09f040a3d17344ce9dba1285505ac1dff97eb819f525

  • SSDEEP

    24576:7b9hPeOP7O63qwtqQEZh3DggezCMj0rEs5d+aWkgaLKjNlCIwoSvQ/8w/7A6wS:7bmQTthCDMSPBWkMNlYoDxA6wS

Score
4/10

Malware Config

Signatures

  • HTTP links in PDF interactive object 1 IoCs

    Detects HTTP links in interactive objects within PDF files.

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • 49df78cc9cd8e744e2c2260d088a0af79080fbd003491b962530ce7f21509f95
    .pdf
    • https://www.tanomail.com/special/j/bf/product/hp-advantageplus.html

    • https://www.tanomail.com/special/j/bf/product/hpen-US-en-USadvantageplus.htmlen-USHPen-USAdvantageplusen-USen-USTELen-US03en-US-en-US6701en-US-en-US4401en-US9:00en-US17:30