Overview

overview

3

Static

static

3

invoice_3390.pdf

windows11-21h2-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    Quarantined Messages (33).zip

  • Size

    39KB

  • MD5

    0325b2e4de229f6d969de9addc01ecd7

  • SHA1

    200c3abbcbccc3ef74e86fdfeb0f41bc0c0cb87f

  • SHA256

    a513f7876bacb1b528c6c87e266aa5f3b2dee33daeb7ff817b5e2f0a8d7ffe61

  • SHA512

    1a0f093132c65a0367ecf8f0e425b3f82e43189608e4c56f7e2abefdf1b292ba0c145e8694ef502ffcbf24ef3566f08dd7d096baac02e1610165715ae7faee4f

  • SSDEEP

    768:YG5NL7rB6N/yNtAaAS7bcFa/z0GtVIpxvbK5TuqKDgKyF/5i:d5Nrg1K7bSGtcK5TuQ/5i

Score
3/10
pdflink

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

    pdflink

Files

  • Quarantined Messages (33).zip
    .zip

    Password: infected

  • c7773d5e-954e-4485-f75d-08dc000003db/4108e27b-797a-18ac-e104-435b766b8fd7.eml
    .eml

    • https://goo.gl/KwTXuS

    • https://url6691.getjobber.com/ls/click?upn=Gx6Pf38gonqBsndfmYW-2BgeEtEfYMds9Lmd0tXmO82fjmupHUx1vQNMEQL0PE8Lik2djCkVud013u5dVebEL-2BjHtxDUfrHSV1t8R7ztVC5R77jihWlyPkTAwbWx3m9HXayXUB-2BScXyJbQiSDzhUbBhnjBu26tEA61IpW-2FK13KHPxFWqt1kGdK-2BOEsalm9Or12gAauM1PsBittHaABckrfVsBGcCeu-2FdTvOzTEbdBWISLNzEW9F5Ky0PS5cNhRot4ZS0vz6oSTiEtXXVRj0c2wOk2wow1aXhsYmn-2BwkpukdlSVBmOmGdh61Mu6Gcbsuz3VosiqBAjAhpb0-2FfIGXOzeokVeRLYSObhEk-2FzqocAutb8dpqfT8qe8icfogvBDbcADL8wWBPnyWlpptWwq-2BlzeEG-2FkwP3dsdU6XMfbV3lpEdFs0VBLGg5zOhiuL-2B4ej9sk2Tnp_2K5nmSj-2BU1uN-2Fi6VtXL7VBmLo-2FoviZmaEi-2BDJ-2FqDCSj9xFKo7coyBATvx6kTVb6Yw-2Fd-2B3Gq4CS5nTjh0Bih3goX6oBInCWXClCKryBFH00aVhOL5wsxOtLvVzq1urKpj1RZXwwxlpMuXOsEq7PFZRGqtj0aYILr7rORyWXShMpgShy-2BLwaWwJ4kWt9NAdjNEjh7G0nm2t8MhRuTPEezV327HOumosCkdTSsz-2BkR-2FCJkH74fivnH-2BmLNfqKVVhQRwNn-2F3rKA47yDvfxL9oC8HtPVK42b32rzsWxIGiyP8ZW1YMcc36gCPi28Bm5Yh8IhinM7EB-2Bsa3bmt303s307mOdqG3sk4k-2FY9aPyrDqTwUyVR11PgwWa40jpeLCafCA3e

    • https://clienthub.getjobber.com/client_hubs/22d6683f-7344-469d-8064-a492a8cec9c4/invoices/84287723.html?auth_token=eyJhbGciOiJIUzI1NiJ9.eyJidW5rZXJfdXNlcl9pZCI6NDU0MDEyMzMsImRlbGVnYXRlIjpmYWxzZSwiZXhwIjoxNzA0MTM3NTIzfQ.6WHgdA74iR44n2iTyyVTxsEs84CzQ2WSW_nxhWvhkwE&comm_channel=email&comm_type=invoice_sent&utm_content=in_email_cta&utm_medium=email&utm_source=sendgrid

    • https://url6691.getjobber.com/ls/click?upn=Gx6Pf38gonqBsndfmYW-2Bgfb5dGCOgNQ0M25j2oAOJITaXthjiv7cBiq8aqx-2B6ILoi3OcWPTQl-2BdKT-2B1Nwv-2Fucj7M5lBN3pDi1EX-2FagKpsr9aUwIUFjTe4VcdKRf0-2BLN3yoD6Owdac0oBzJKTqZqOCg-3D-3DvDJR_2K5nmSj-2BU1uN-2Fi6VtXL7VBmLo-2FoviZmaEi-2BDJ-2FqDCSj9xFKo7coyBATvx6kTVb6Yw-2Fd-2B3Gq4CS5nTjh0Bih3goX6oBInCWXClCKryBFH00aVhOL5wsxOtLvVzq1urKpj1RZXwwxlpMuXOsEq7PFZRGqtj0aYILr7rORyWXShMpgShy-2BLwaWwJ4kWt9NAdjNE8KUtq0Lo1qx-2Bczmmkjx-2BX5ItfnwvYCneY6fmWrim4L3GWecXMbMDQ1AZDI-2FQieTvg0y6YF62Q2DOLsGiIlB4swh95cQ6GhwNEtMu-2Ft27U1ANcRCzd733b1pb-2B7Xc0GMfcPUJD0OZbYpW2dYGzuqEvco7gT-2BM1TVMJ99hGLW4PNyiZ2mao-2Bc8Hw4AGHmR11nU

  • email-html-2.txt
    .html
  • email-plain-1.txt
  • invoice_3390.pdf
    .pdf

    • https://clienthub.getjobber.com/client_hubs/22d6683f-7344-469d-8064-a492a8cec9c4/invoices/84287723.html?auth_token=eyJhbGciOiJIUzI1NiJ9.eyJidW5rZXJfdXNlcl9pZCI6NDU0MDEyMzMsImRlbGVnYXRlIjpmYWxzZSwiZXhwIjoxNzA0MTM3NTIzfQ.6WHgdA74iR44n2iTyyVTxsEs84CzQ2WSW_nxhWvhkwE&utm_content=in_pdf_cta