General

  • Target

    Analysis Report Suspicious Websites used for Investment Scam and Phishing URLs.eml

  • Size

    336KB

  • MD5

    5ad5ee6595e37c15e401e158450bf58b

  • SHA1

    979fccdcdee73aecb67729ef387ba15e0a57bd08

  • SHA256

    f3abf8fade6d60ca4c1a56368d48107e23ab317ae071cc7e4da938ee22dbd231

  • SHA512

    9b97a5ef090f766f7b6381bb06fb141eb5b884240cdc8d4c5754fe12772c6d88a25efb50f7dcdd4f83dd2315bd943f71181c501b1e5955b64add7c900aab77eb

  • SSDEEP

    6144:xVUVuHkUHstHCIsXsciBMFIdpwkCibhtP++zjNb:UV4kUMtHh6UJda2Npltb

Score
4/10

Malware Config

Signatures

  • HTTP links in PDF interactive object 1 IoCs

    Detects HTTP links in interactive objects within PDF files.

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • Analysis Report Suspicious Websites used for Investment Scam and Phishing URLs.eml
    .eml
  • TAU - 0934 Analysis Report on Suspicious Websites used for Investment Scam.pdf
    .pdf
    • https://hbzw64.com/#/register

    • https://shopifyjob.in/m/register?codeno=444962

    • https://inamason.org/index/user/register/invite_codeU4MH3Q.html

    • https://shopifyjob.in/m/register

    • https://ama6677.work/register?invite_code=0764ab

    • https://pnr-vips.com/index/auth/signup/invitecode/mdlpXj.html

    • https://nyse-stratlitoin.pages.dev/#/pages/register/register

    • https://afimalls.com/

    • https://swittatch.com/

    • Show all
  • email-html-2.txt
    .html
  • email-plain-1.txt