General

  • Target

    1-1oGIP5-0001SQ-Ni.eml

  • Size

    1.0MB

  • MD5

    449c83835fded8d8ffe30d56327553b1

  • SHA1

    34879975079c14133f2ef7480ba792a26d84dbcd

  • SHA256

    4de043f662086014e521e51b475bca5d556b47db2652102c1086a709a8ce9d0f

  • SHA512

    28721656f5262fa22efc17a7f76fb04d7ebf45c45e06ca7729f435ccd96ba007685554fc850205b93ab2d31072f79de7a483d174019fa628a69b8290c9db2321

  • SSDEEP

    24576:PGPCD1Q0jyzOrfNGdUtvT0UdBnEqNhG3mAn5Lla643qhSd:4DOlrLEGmjpM

Score
3/10

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • 1-1oGIP5-0001SQ-Ni.eml
    .eml
  • WHU_login_process_changes_–_Information_for_Alumni.pdf
    .pdf
    • https://aka.ms/mfasetup

    • https://portal.office.com/

    • https://www.whu.edu/it-alumni

    • http://outlook.office.com

    • http://whu.edu/it-alumni

    • http://portal.office.com

    • http://aka.ms/mfasetup

  • email-html-2.txt
    .html
  • email-plain-1.txt