Resubmissions

24-07-2023 00:09

230724-afje5shf9x 3

23-07-2023 23:57

230723-3zz68ahf5z 3

General

  • Target

    20230723_202204_jWBUH5DiBYgPZTm_FlFt7nnzYPWDh4fX.eml

  • Size

    98KB

  • MD5

    1b9478d9f9faa1ac7e08275e5958ade3

  • SHA1

    e2f3e09aad33ba4bb5ae7a9d13475a71dd42b55c

  • SHA256

    e8a5f5850482d115f6686e1fe206c6ed750e4b5c2ece76b32e9687fca822a11f

  • SHA512

    bd934a9eda08819531d7c6aa056106fc0e063223ca9694ce406069b42456340619c5ef839791fad2c88cd5b3506225ec7d0b5f8b05de729ed58ad50e368ec8f7

  • SSDEEP

    3072:zwECVzA6tn2zETQ2OMDzO2NTVHaAijx9O:zwECJlt2GmMDlTVaAgx9O

Score
3/10

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • 20230723_202204_jWBUH5DiBYgPZTm_FlFt7nnzYPWDh4fX.eml
    .eml
    • http://url4303.returns.international/ls/click?upn=PAxH0oS6gIPCH8UyhvOORPb1-2BaRQSwrw-2FEFXtJxx8tb1b1tlwFQtWuZa8hJ9Gj8ubwDKKyo8OgQelbLX1mTq2Q-3D-3DQ2EK_7WLClo4hMZy28m2ut9r8xqslPndqwcTc4OTl8w8nzMR3yEw5CmNR1mS4x-2F52-2Fo3Hb9WBv1yHsfrkKYXzxjYxqkmDA4RQx5KokrdOduXv8yzy25kpyH3OHDeXeeQy9PnGoe2mTEFJKwhFvZYHTSltdDWxo1884AAa2wFyzxKaUx2zkA7EnveXF-2Btox98bhhcLScye-2F7PtJ3cS9mhZMQ08PlcBmq0ciDfankinx3d-2F5pk65jov62uOqF-2BsmVTl44cNyH2v-2BAFegKUDEt2LbALi9gAwxWc-2FOJ4mN2i41IQ2bxrNa3wdOieEZF0Nti09YeFJZRrnAM1GKrUR0ou9IyyqyzBXhmP7ndbJD6Eyyja0efRfF5FzkFLJ-2FydeBqOBSwFw

    • http://url4303.returns.international/ls/click?upn=PAxH0oS6gIPCH8UyhvOORKTcftLtM03JV0kgfR5wGLHdi7Mvaojy-2FgO4ti8tCSDFwM7sg-2FqUr0LJe0gmMMsZNZ4iKTJ2NDO5-2BmjgUlgcarkA8R6s-2FXkpnPePyIh2StN52J7N_7WLClo4hMZy28m2ut9r8xqslPndqwcTc4OTl8w8nzMR3yEw5CmNR1mS4x-2F52-2Fo3Hb9WBv1yHsfrkKYXzxjYxqkmDA4RQx5KokrdOduXv8yzy25kpyH3OHDeXeeQy9PnGoe2mTEFJKwhFvZYHTSltdDWxo1884AAa2wFyzxKaUx2zkA7EnveXF-2Btox98bhhcLScye-2F7PtJ3cS9mhZMQ08PlcBmq0ciDfankinx3d-2F5pmvC1PDbiC7cgipgAb7uBMKY1EN4YEst2rdVf0jD7xrYDHavxlTEzEoxnIJG-2BlgpS-2FMxcE4Ld9gHDlxYuH5P-2Bwf4TZy6wY2QlZ1xNG8uKSchf7ghpBUvr9hbw006gF47O53MLQEqmllz-2FxmMAprrXa-2B

    • http://url4303.returns.international/ls/click?upn=PAxH0oS6gIPCH8UyhvOORD18GVQ4KAO3uCF2py3K0q-2FEtJaRkhLEtcQK6O5oTxHM-2FTQqQ2izlKTa7WborsWeqGwb3Uu41-2FKpZ42GAfNg06q272RlfCclPLzdR8cTvQixene0ECIq4rA-2BJMoXbrlGVg-3D-3DhH6W_7WLClo4hMZy28m2ut9r8xqslPndqwcTc4OTl8w8nzMR3yEw5CmNR1mS4x-2F52-2Fo3Hb9WBv1yHsfrkKYXzxjYxqkmDA4RQx5KokrdOduXv8yzy25kpyH3OHDeXeeQy9PnGoe2mTEFJKwhFvZYHTSltdDWxo1884AAa2wFyzxKaUx2zkA7EnveXF-2Btox98bhhcLScye-2F7PtJ3cS9mhZMQ08PlcBmq0ciDfankinx3d-2F5plOV-2FNC0d2fU0ChHWpM6XpCim-2B1qEdi8cXFRtmxVf5HVBolSQA9cLv6chZle7NJpkHYTc5tJkqzKsRLo2NVwzxeI-2BbCoeoUSujhcG2w17sSbnfC2A6137eLVDBLReqNdUGa-2BdnQQCsgBebg0JWJ3And

    • http://url4303.returns.international/ls/click?upn=PAxH0oS6gIPCH8UyhvOORK-2FBUsA0gK4yL0DjGjEPI14nQklzntJLAU-2FtFBRknmImXf-2FB6FyaQzncqqnfJgRwsWShz9tt3dsXaveizIRp9R8-3DQnsz_7WLClo4hMZy28m2ut9r8xqslPndqwcTc4OTl8w8nzMR3yEw5CmNR1mS4x-2F52-2Fo3Hb9WBv1yHsfrkKYXzxjYxqkmDA4RQx5KokrdOduXv8yzy25kpyH3OHDeXeeQy9PnGoe2mTEFJKwhFvZYHTSltdDWxo1884AAa2wFyzxKaUx2zkA7EnveXF-2Btox98bhhcLScye-2F7PtJ3cS9mhZMQ08PlcBmq0ciDfankinx3d-2F5pk3X9II8xZcd5VqN2GyaFq8pivSowEGt3-2Ft-2BKV3AOFBuzshCba-2BSoH9ndz8J9Dp9V-2Bq6-2FBCfDehBz2m8j3YDu8nqfW69D8alklHfthPl5VEOsv2dYCCiylD2FqgD-2FvOvyPV-2BS-2BfPP-2BllkvgyWsyvqF5

    • http://url4303.returns.international/ls/click?upn=PAxH0oS6gIPCH8UyhvOORGTF675pc6Whqy4juJY-2Fufjioe1bVBFqc6rDoLYVEecF6AnU_7WLClo4hMZy28m2ut9r8xqslPndqwcTc4OTl8w8nzMR3yEw5CmNR1mS4x-2F52-2Fo3Hb9WBv1yHsfrkKYXzxjYxqkmDA4RQx5KokrdOduXv8yzy25kpyH3OHDeXeeQy9PnGoe2mTEFJKwhFvZYHTSltdDWxo1884AAa2wFyzxKaUx2zkA7EnveXF-2Btox98bhhcLScye-2F7PtJ3cS9mhZMQ08PlcBmq0ciDfankinx3d-2F5pkpiQR151g6j1UBO21-2FjwhIvyZbyllFbmZ8Dqicer3z0QqlZoR7m1zFGUl-2FEkff1HOprYjcMMDkFCXD63gpPjNZfvpXgIxieAhKXYpLtaOwMXoFeNO-2BV-2F2qTNj4r21R-2BVxnVUyIJbnypUI3ylKLWRme

    • http://url4303.returns.international/ls/click?upn=PAxH0oS6gIPCH8UyhvOORGTF675pc6Whqy4juJY-2FufhAdlObiPBympjImExvyV2mDV-2FW36BURDZr7RVX-2B8wiuH2Ep6Sw8akkKXOVxi4wlwY-3DXjda_7WLClo4hMZy28m2ut9r8xqslPndqwcTc4OTl8w8nzMR3yEw5CmNR1mS4x-2F52-2Fo3Hb9WBv1yHsfrkKYXzxjYxqkmDA4RQx5KokrdOduXv8yzy25kpyH3OHDeXeeQy9PnGoe2mTEFJKwhFvZYHTSltdDWxo1884AAa2wFyzxKaUx2zkA7EnveXF-2Btox98bhhcLScye-2F7PtJ3cS9mhZMQ08PlcBmq0ciDfankinx3d-2F5pk0gs0vy961CW3IoAD2qkFe3jqz9d2pJC9KODQMyU7gbvu-2Fgus-2BN6BqXzar04HKcn4awiAqPgrWhbtpmUKSAllikwsDjqmL0h7HRSgqmRMrnQ3a8uDDd-2BTGaBooibbcF12J9Ae5xRjp8vyBNzDg3Cvu

  • Label-495614810.pdf
    .pdf
    • https://inpost.co.uk/lockers/?utm_source=zigzag&utm_medium=email&utm_campaign=thank_you

    • https://inpost.co.uk/tracking/?utm_source=zigzag&utm_medium=email&utm_campaign=thank_you

  • email-html-1.txt
  • email-html-2.txt
    .html