General

  • Target

    Quarantined Messages (1).zip

  • Size

    86KB

  • MD5

    e9bb754089f98561a5fb780a890f92ac

  • SHA1

    e642887f49d19a067937ff4785e1efbf05e12612

  • SHA256

    28f7c6f4bafcf1bc4f7e5d6daffe1fb9a938a4478893a3ef56b873ae30886186

  • SHA512

    c0a15612fc1b04ee93f0001d3061473d422b28294549e51a27b309a7172d8aa3619fc0a7122e8eca04d1d25fb7ada187e16d1189aae14ed9f3d8d02f8773d3fd

  • SSDEEP

    1536:O4wdzzTK18vuc32lfuJIXxHV59MlOqLViQjYz4BJflziMATsfJL:IPTK2vd6mIBHVXMBY4BJtzLATsfJL

Score
3/10

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • Quarantined Messages (1).zip
    .zip

    Password: 1234

  • d87a2ff5-9915-4989-6c78-08dbcf66155f/923eb163-0dd9-3998-d22c-56d8042ac7a9.eml
    .eml

    Password: 1234

  • 80043274 FreightReport.csv
  • 80043274.pdf
    .pdf

    Password: 1234

    • https://www.sortedlogistics.co.nz/glossary/#termsandconditions

    • http://sortedlogistics.co.nz

  • HandlingReport_Invoice_80043274_20231018120909.csv
  • email-plain-1.txt