Resubmissions

25/03/2023, 06:02

230325-grhrbabd79 6

General

  • Target

    1-1oGIP5-0001SQ-Ni.eml

  • Size

    1.1MB

  • MD5

    f90d76869b3b76da1e28536b5d0b122f

  • SHA1

    f5c3ea20122b78f43ed3c78c67b65a894a9abefb

  • SHA256

    3d68cc77d11e370ba9b2b64eefdad5e0f2529145f6ac5786bca285df56e69640

  • SHA512

    5e726d4f60dacc7fa8233fb3a03bda424b105ef3e39bef2ddacbb6b7060c05441f3ca2401a74aa8f62b5d85e8be5d42b20e4f06d91a8a3e6897aec908fb1e26f

  • SSDEEP

    24576:jYbFIJfJ1FD8y0dSlqcPQaYxy9Jfy6jPa12dfcb4HoS:fvFLloyzTZP

Score
3/10

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • 1-1oGIP5-0001SQ-Ni.eml
    .eml
  • WHU_login_process_changes_–_Information_for_Alumni.pdf
    .pdf
    • https://aka.ms/mfasetup

    • https://portal.office.com/

    • https://www.whu.edu/it-alumni

    • http://outlook.office.com

    • http://whu.edu/it-alumni

    • http://portal.office.com

    • http://aka.ms/mfasetup

  • email-html-2.txt
    .html
  • email-plain-1.txt