General
-
Target
Quarantined Messages.zip
-
Size
1.8MB
-
MD5
59673c53f0f238a49b701267bbb9a15c
-
SHA1
325f48c35e7a9d7f2cb5e4c388ab63417e0314da
-
SHA256
5c70150d321a8ad37c421931026bcb9c7c927354b2aa2ebcafc5db429d3e4c6c
-
SHA512
a0d4e4c0d7dc8d4ccf961bf2cdb2e1238cc3856163991332f3ba8fb40825361219a870dcfd2f92d2ac07b19e2f4bf2a55415fa797776909e90c71df6b00cffe5
-
SSDEEP
49152:5fKtkuaeOcxa2pCI9V4xTTHz1FmkMXVMCMreYKj:5itx/v3pxV4xTTJFxM6Cgeb
Malware Config
Signatures
-
One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
Files
-
Quarantined Messages.zip
Password: student
-
fafe83d2-4f36-4e9b-487d-08db5d36b6fe/f00428fb-2f73-0af2-d973-3894e67cb153.eml
Password: student
-
http://www.pammlogistics.llc
-
https://www.facebook.com/PAMMLogistics]
-
-
Outlook-3lcymp50.png
-
Outlook-3zeafruk.png
-
Outlook-bf5fk3dc.png
-
Outlook-c2utuodm.png
-
Outlook-https___ww.png
-
Outlook-jelnesgd.png
-
Outlook-no3p0xym.png
-
Outlook-ohvd2cgz.png
-
Outlook-oph4angx.png
-
Outlook-roqtwmp5.png
-
Portfolio-Pamm_Logistics_LLC_2023 (1).pdf
Password: student
-
http://www.gpo.gov/fdsys/pkg/USCODE-2011-title49/pdf/USCODE-2011-title49-subtitleIV-partB-chap139-sec13906.pdf
-
http://www.gpo.gov/fdsys/pkg/USCODE-2011-title49/pdf/USCODE-2011-title49-subtitleIV-partB-chap139-sec13904.pdf
-
http://www.ecfr.gov/cgi-bin/text-idx?SID=4a559f1c6b274ad9fc428fbae761efe7&mc=true&node=se49.5.387_1307&rgn=div8
-
http://www.fmcsa.dot.gov/urs
-
http://www.irs.gov/FormW9
-
http://www.irs.gov/FormW9.Purpose
-
http://www.SSA.gov
-
http://www.irs.gov/Businesses
-
http://www.irs.gov/Forms
- Show all
-
-
email-html-2.txt
-
email-plain-1.txt