General
-
Target
FlexFleetRental-INV48398.pdf
-
Size
134KB
-
MD5
972d5558182a41f4a84009b480cce3fc
-
SHA1
a45c24a656249f06fcb9dd700e5ae7c067a13657
-
SHA256
8bb5fc67a0fbe4ec1e76e265c536a4dd2d3773f966eced060706bef9e02f6d70
-
SHA512
133d91e0042392482ca5a245d90aab7a12b2c1f737f8bf60747a142681f90fc25199f36659c434b6c145350ffe2d7dbcdeacb02f9663ad9561889dd4a459dd40
-
SSDEEP
3072:c8Rh3Afi+h4P/gsNzvXxjstNlr+7KX7XjwMR7:cYqfiUTOXxjstjrwKX7XjwMR7
Malware Config
Signatures
-
One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
Files
-
FlexFleetRental-INV48398.pdf
-
https://adclick.g.doubleclick.net/pcs/click?xai=AKAOjstFA55hCSrFSTBDNko3225YAz6GkouTQlHjExWXRbT5OPMnSlE8Wh4LAVp-D7jWRr-LcKW0w-HH1g8lCVAK_eU-5azfUXfjqfTiHFOFWV9I8m2ZaGczGlov1iY8kMSnelCX-AHG6VYBmpcZJapT1XbdlOM3B9u9whYqpkxEpFLbkzwDao00-DL8JyS7UIxIApb_JHANRmtKLSuRcM8IWqFaP0cOc8n8jTedmwHc8oAw2MV2tRUaAnN3eaxaESpc8fovDeWslJ0A3duo5g46YzCYxQ8A56RI5MGcQw4TZj6TeWuj6jRjAe7g0X18--IBmztC1sUi6XuHkB1Ew-z_h9bv1XK-s_9L6zeDfQPtMsI3hOqp8T8545VdgCoElxs&sig=Cg0ArKJSzEpZ_YMvCKWCEAE&fbs_aeid=[gw_fbsaeid]&urlfix=1&adurl=http://residenz-vitalis.de/tmp
-