General

  • Target

    Invoice_INVAB080085.pdf

  • Size

    50KB

  • MD5

    652239bbcb68fb57aaf062494433fd80

  • SHA1

    b8a038a184bb18c220749f01ee28282884fc11fb

  • SHA256

    c158000c9ef9953d4e22684a423a4416291b218a5f0148ddb7aba10d3c44c1e9

  • SHA512

    4be7da3a7fd606618446432ae6502e58d9eb1941799d4a88df44cadc9f840a856f7f466e9984e07e6e2474bfbac36be64f57201873f94e9af06c15aafba420f2

  • SSDEEP

    768:JlblofFGFAaBveA1y0li2Drftj6RdrKxiAMYtg7z8xrVuRXH4p8n9lvHQed1Y0Ig:H8F3KxYWVZ3y7rHp3fQ8ZFrU9h1ds

Score
4/10

Malware Config

Signatures

  • HTTP links in PDF interactive object 1 IoCs

    Detects HTTP links in interactive objects within PDF files.

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • Invoice_INVAB080085.pdf
    .pdf

    Password: 1234

    • https://helpcenter.nshift.com/hc/en-us/articles/115004241093

    • https://nshift.com/terms-and-conditions