General

  • Target

    Quarantined Messages (47).zip

  • Size

    38KB

  • MD5

    f1e7f1b7b524b5f49068aa9b56650277

  • SHA1

    71f3cfb22b95c5f07ff149a14429a44f06b1a327

  • SHA256

    6d1853c5c661be8fe8a242bb24f2b88224f10eb3a231acd47e0c53fb7f3d06ab

  • SHA512

    e6c9e2e4d3fee8e9d32e7703bfeb59dc66211b25ba76d07fd1d6a669f4790ebbbf49a9af279a2b862c688c13079adae332d3c2240ea3075fedd3d22cb7cf37c7

  • SSDEEP

    768:phBPwZdVEiQ/UQxVFAzTdDNLABoSGrgZkM5LvHYRgCzjNsf90jsP/:CjV2cW2d4YhkLvHYGC9slL/

Score
3/10

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • Quarantined Messages (47).zip
    .zip

    Password: infected

  • 34293838-f663-4a70-061c-08db5c01ee5a/02eb9ac1-9d62-acda-b0a6-89d78e9eedf3.eml
    .eml
  • Beer Store Payment_May 23_2023.pdf
    .pdf
    • https://easyweb.td.com/waw/ezw/servlet/ca.tdbank.banking.servlet.BillPaymentCompleteServlet

  • email-html-2.txt
    .html
  • email-html-3.txt
    .html
  • email-plain-1.txt