General

  • Target

    d6564dee-17a5-261b-7a60-4a9bd7411672.eml

  • Size

    454KB

  • MD5

    9e2a7a4b97789367aba15b6093561854

  • SHA1

    7b5ae82ce51eb2ad9dc82dd8f933861613595e8e

  • SHA256

    69297819d0edc330b79b091c62824779c532bb1036576527817abf045efd4f7b

  • SHA512

    38cb4e8ac32c68b22c4538d1edb735c35292adf86a369f5191a39dc90e938e028da5b6f58bb9b09624ca417e190027d2366529eb5fb616f7cb3bc04f00e9b6f3

  • SSDEEP

    12288:g2icvh5OUnFIiD609ZBUo3wUV99ip/sYBOsF+Ss:/RFIiD609ZVn6T0s0Ss

Score
3/10

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • d6564dee-17a5-261b-7a60-4a9bd7411672.eml
    .eml
    • https://aka.ms/LearnAboutSenderIdentification

    • http://www.cisalpinatours.it/

    • https://cisalpinatours.it/aggiornamenti-regole-viaggio/

    • https://www.booking.com/index.it.html?aid=958448;conf_email_logo=1&

    • https://secure.booking.com/confirmation.it.html?aid=958448;auth_key=0AXaYwLfGuY3dlfh&;pbtrack=email_mainCTA;from_conf_email_tracking=1

    • https://www.booking.com/hotel/gb/innside-by-melia-newcastle.html?aid=958448&label=postbooking_confemail;pbsource=conf_email_hotel_name

    • http://www.booking.com/directions.it.html?hotel_id=6762311&aid=958448

    • https://secure.booking.com/mybooking.it.html?aid=958448;bn=4169545365;pincode=3269&;source=conf_email;pbsource=conf_email_modify#gallery

    • https://secure.booking.com/confirmation.it.html?aid=958448;auth_key=0AXaYwLfGuY3dlfh&;source=conf_email;pbsource=conf_email_modify;label=conf_email_print;pbtrack=email_print_btn;from_conf_email_tracking=1

    • Show all
  • ATT00001.png
    .png
  • ATT00002.png
    .png
  • ATT00003.png
    .png
  • ATT00004.png
    .png
  • ATT00005.png
    .png
  • ATT00006.png
    .png
  • ATT00007.png
    .png
  • ATT00008.png
    .png
  • ATT00009
    .jpg
  • ATT00010.png
    .png
  • Outlook-jj3rg222.png
    .png
  • email-html-2.txt
    .html
  • email-plain-1.txt
  • staPdfAidaAirplus_1700124826142.pdf
    .pdf
    • https://cdctokencisa.siapcn.it/Tokenizer/showcdc?crypted=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

    • http://www.airplus.com