General

  • Target

    Quarantined Messages (3).zip

  • Size

    171KB

  • MD5

    0541bd48ebbd983086ecbd9d960d639c

  • SHA1

    5b81a3b5592da50ce7eb011f0a5c2ca6c8341ccb

  • SHA256

    1b28a4c9abb27b20d4a5fa9e75b9796bb1242085e2e433fbeb2e147a49bb7e3a

  • SHA512

    daf4b91911e6f9d343c65e2a64c45d71caf85ee501439950b390ca79649766a67d5c13cd4e4b43426bc618b46bbdffaf5c5e1417f972425d308731f1124e35b1

  • SSDEEP

    3072:vR6hEk8SkOQTzAXJrifJIJDVvzKEAdOqZHMd9aQ7E6gZcwOjPUuhf8dRqLRDI8Ju:vR6SdM5+RyV+1dOqZHMd/C2jcOf8dR8q

Score
3/10

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • Quarantined Messages (3).zip
    .zip

    Password: 1

  • 63284ba5-c82f-4ccd-5644-08dbf669c494/35c61f31-b3be-6bbb-cdce-34086dd9c959.eml
    .eml

    Password: 1

    • https://www.docusign.net/Member/Image.aspx?i=logo&l=12dc68f8-1068-448a-9258-ac063f6b5609]

    • https://www.docusign.net/member/Images/email/docComplete-white.png]

    • https://www.docusign.net/Member/EmailStart.aspx?a=e0a25da7-43ae-401f-865d-ea730e581dbf&r=caf0c108-4663-4907-8910-be98f840d20d

    • https://protect.docusign.net/report-abuse?e=AUtomjpFak9GlbPL0zFFi10FD3I37AmtpoiVJrtBl8RgN-LfXiRsTikFOAX0b4y-UxQ5SY5n_Rh4kWT8kcr_YZgYDqCkFHEOihBj6jCheSFDBN_PbvF07WWvxdNdXZcfkUFvV3u9FmV3HU0MMabwF2cFsR3DEngkaDkegflH-grKnq2JV_0PaHDIfP1dSBS9UqfOY7TFrb_yecjR_ZstnO5K6xW7-qlDzCVCsoAB6fezvtJA90cbwd8oS54lmdCLsH0dE4zbBzZ_mIom_H853B4KnzBAAPWWhQd6Dg6KZly9vAqdTQtkKNtBXtMvZqiVeNSI3uzYYi5DMvCzD6qxlzBvbItJPtSjjwCcHUFIRvQk6SOS_WeQ9t8XqSrV0JIetxmvusEDYH2h2TvIvz1WCQyjAp4NDLwL3Azqec9Ia45R_LqHLQhpfhCWat-9Gz21aQ&lang=en

    • https://support.docusign.com/en/guides/Declining-to-sign-DocuSign-Signer-Guide

    • https://support.docusign.com/en/articles/How-do-I-manage-my-email-notifications

    • https://support.docusign.com/s/articles/How-do-I-sign-a-DocuSign-document-Basic-Signing?language=en_US&utm_campaign=GBL_XX_DBU_UPS_2211_SignNotificationEmailFooter&utm_medium=product&utm_source=postsend

    • https://www.docusign.com/support

    • https://www.docusign.net/Member/Images/email/[email protected]]Download

    • Show all
  • Cvent Event Diagramming Dec Renewal - Melia Punta Cana.pdf
    .pdf

    Password: 1

    • http://www.cvent.com/en/product-terms-of-use.shtml

  • email-html-2.txt
    .html
  • email-plain-1.txt