General

  • Target

    Quarantined Messages (13).zip

  • Size

    108KB

  • MD5

    0834dc042376beac2fb22c34224c80d5

  • SHA1

    30dbb10f62511ff1772d837b786b6edd70b16fe8

  • SHA256

    05da4bb69bca5f9f5399bc750c82a6563874eadc8cf2f51a5d1105b0d2622687

  • SHA512

    c5f7d5f2f0b3253ba1afaca5bd22232e9f7482c1063465c80ddac6c485a36b5c15ab5570450f1d4f5c50288f74666e73d75af4b32ac939d72f648961964b0fe1

  • SSDEEP

    3072:QdZOIYlOj5ZDoiS38j1m8jQKeaXrTmlsZyfF27LDHv:mOIYlO9ZDo9Ms6QbIKlh87LDHv

Score
3/10

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • Quarantined Messages (13).zip
    .zip

    Password: infected

  • bb1d1499-1f7d-4c1d-a713-08dbeac41c63/fae2e9c5-4054-79a6-07e4-0261d2a2a77d.eml
    .eml
  • Robert Allen nov-19 to nov-21.pdf
    .pdf
    • http://hiws.ca

    • http://www.winnipeg-south.holiday-inn.com

    • http://www.ihg.com/reviews.

  • email-html-2.txt
    .html
  • email-plain-1.txt