Overview

overview

3

Static

static

3

Pledge_283...TH.pdf

windows7-x64

1

Pledge_283...TH.pdf

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    Invoice from XtraMath.msg

  • Size

    77KB

  • MD5

    a86970ea1c10f6e4a1cee16085659e1a

  • SHA1

    53684468ad33a7b3f5348eaba4a7c45ce9579ac4

  • SHA256

    4b3aef8291d51432dc6f320ceb2407214a7c1e2bffff7d97913a4502d5ef05d6

  • SHA512

    f7a80e653b63c849f7d9b9982af9280ef745e7cdb576eb3e026d4bc61ee9b819f517e7893b901247a0adb8678d0b7e0d25da7ec53762ac3427f6d66dd83f41c2

  • SSDEEP

    768:TcFt7WonDERoJYKKh4wSj6kAi+fDlTJ7TTTEr7HGnfHqNADCDNBcCwLpTEr7UlS/:qD+KKmwSj6LLor3NA9orDbJKEuu6QUi

Score
3/10
pdflink

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

    pdflink

Files

  • Invoice from XtraMath.msg
    .msg .pdf

    • http://security.intuit.com

    • http://welcome.xtramath.org/w9

    • http://www.xtramath.org

    • https://connect.intuit.com/icnportal-server/rest/invoice/viewed/scs-v1-4576c2b18a6645628da3ace53f37623a6f0a683668d84433bce8bafc89ef43d9a51330c8b5c449818064702d5e5e86c5

    • https://connect.intuit.com/payor-terms-of-service/en_US

    • https://connect.intuit.com/portal/app/CommerceNetwork/view/scs-v1-4576c2b18a6645628da3ace53f37623a6f0a683668d84433bce8bafc89ef43d9a51330c8b5c449818064702d5e5e86c5?cta=viewinvoicenow&locale=en_US

    • https://connect.intuit.com/portal/app/CommerceNetwork/view/scs-v1-4576c2b18a6645628da3ace53f37623a6f0a683668d84433bce8bafc89ef43d9a51330c8b5c449818064702d5e5e86c5?cta=viewinvoicenow&locale=en_US

    • https://ips-logos-cdn.ips.sbg.a.intuit.com/dfe54b00-d606-4de1-98d3-e319a40d0d1f_template.png

    • https://plugin-qbo.intuit.com/brand/1.1.9/product-specific-brand/assets/quickbooks-payments/logos/qbeinvoiceemail.png

    • Show all
  • Pledge_2833_from_XTRAMATH.pdf
    .pdf

    • http://xtramath.orgwww.xtramath.org

    • http://welcome.xtramath.org/w9Please

    • http://xtramath.org