General

  • Target

    FW__[ZOOM]_SLT_&_EA_Digital_Christmas_Party!.eml

  • Size

    168KB

  • MD5

    7559642ecb8f070e9bbc0890e9f8b902

  • SHA1

    d1576bf4a6eea320ccb803309175b8998b6b447b

  • SHA256

    4b30b66686e5be9bbb5e405435f9303129f28b013aa0fa25687eb1fd047382d2

  • SHA512

    6c8ca5796a8202e081dd5e41480a186a13088b14b5611b40c0cdf54dd8c1eb39790aea0aa73c3f20df3d82578ff2e846dd92e50bf354432804e6162fe231144f

  • SSDEEP

    3072:jvEmyXSvMQ4G+sIqe+KTxdaJEp0TeKiSS38KnvuYT1ciksjc8jmjhG:GXXG+sIqlKraqSTeKb6HZEsjc8jKhG

Score
3/10

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • FW__[ZOOM]_SLT_&_EA_Digital_Christmas_Party!.eml
    .eml
  • Nostrum.pdf
    .pdf
    • https://www.adobe.com

    • https://getmeoutofforeclosure.com/ie/delenitiqui.php

  • email-html-2.txt
    .html
  • email-plain-1.txt