General
-
Target
Mail-AmazonReports-33247.pdf
-
Size
158KB
-
MD5
4bcbc10c2135375158cc7ab8adb1e662
-
SHA1
2b32ae59daa07ab0f4a8a9a095eedc23e819c068
-
SHA256
903a2215a3b3840c00d0a6fbdc5ea2c068735c622df00237d41cc5963fad2564
-
SHA512
e5312b90d19177fff0bf0de9206616154cf13ef19431e7b4fb882d693dbfa36c2909715772a3df8bd9c45d6bf6847f268b0030f45f4bc09fd3040280f51c2822
-
SSDEEP
3072:fTG1TRxEOugdu8ZwqUn51FncNhZ1N4q7G1ehPdlholE2zg/WrW:bAliOfU8ZwBn50hZ1b7GA3lUBc/R
Malware Config
Signatures
-
One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
Files
-
Mail-AmazonReports-33247.pdf
-
https://trk.klclick3.com/ls/click?upn=DVhTaHpjtpnrnTIBRVrM2N1jyzWnrAjNnY83vDMXdbNJR-2BCjAIs51V-2F7rsxhw5FoGENV_Za98whu9h54I3j0NJ-2BGorJkEvk7dcRqKWBfvlx5dJbgNGggkvXVEZHqFD1qyIKykvhttccj18FuUf2bY06VBqqsWkcYyj4NrAq7K-2FmPVKp5DIX7cowUBb1-2FyydimqrEuntupxGlnwOWhcy61LTtDagpkHFJww2PqY9eQ9nhCjHJlaRgpjAqpjT3-2FM83D9nEvKavOqxYtSk5-2B0zuhLMcrBUOkO72PhQiNdVpfnBG0gE9xuc8tRtaAiwf4RbsEhJZZI7v7F0Tn59Qa8T3J-2FZKJSdPmYTkzOqoE7z3IQ26DLWld6OvDQDGlgXDR-2FZTVkX5Y
-