General

  • Target

    Quarantined Messages (2).zip

  • Size

    89KB

  • MD5

    4d510f55f17b659c655518ed36ac4edd

  • SHA1

    a96381246753ff884ac7e33fb6dded0b33e884c9

  • SHA256

    7f14b6ecff02cb7883f9fb29a8c1e875ad5195992dfa9f0441ad97164f559205

  • SHA512

    b93670903622b8650194b65c92a6d6397d9c690b34691d6a92939a68f09fa9a14b7bae833c75902b33bb3bb088a6835c19630b86ca9e19527355b44232c8eeb0

  • SSDEEP

    1536:q8gdfeAjc5itRmALK/qWXaCudj8Y19NYHMMB4n8gtSYwaPrHyq3NDgAYUO72Awbv:EfestRmAe/qUumS2sMBqLN+2B1A8eQ

Score
3/10

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • Quarantined Messages (2).zip
    .zip

    Password: malware

  • 49fceba0-ceb1-4946-acc9-08dbbedf750e/8a95894e-b8a6-c6d4-aab4-cceac1dc566e.eml
    .eml
  • Njevity, Inc._36027544.pdf
    .pdf
    • http://www.njevity.com

    • http://PowerGPOnline.com

  • email-html-2.txt
    .html
  • email-plain-1.txt