General

  • Target

    Quarantined Messages.zip

  • Size

    55KB

  • MD5

    78411b8fbb160e4ae37ecb47aa3e4e1c

  • SHA1

    f6bf9658d3917d33d5906bc6f995218579de391d

  • SHA256

    dea4cb915d5e241f46c4c25fc05a8fbe46b066e747a729a29bd0d3f9182946f4

  • SHA512

    e3db8079c11c75ca1ecc230c8cf1004b9b881ff00691edb34ba99fd9a4da389995d9209ee00e85eac84448fbf5813e3c0ca67ef32d547496562877be7c3272d0

  • SSDEEP

    768:zsdal3ClQK6xSj4YO/1ZTSE1ublX2S6eMvb6YhFWwr7GXIq5ZmoYQ6nfbI:EaclQNgkY01ZOE1ilGFv3howGPmi

Score
6/10

Malware Config

Signatures

  • Malformed or missing cross-reference table in PDF

    Malformed or missing cross-reference tables are often used to evade detection

Files

  • Quarantined Messages.zip
    .zip

    Password: infected

  • ae5db71b-c998-49ee-0905-08dc0893ff9b/7329ec44-7a38-b7a2-a806-b3b7d9e78224.eml
    .eml
    • https://goo.gl/maps/Cs7rFETdE5GA3CgKA

    • https://groupenordik.com

  • attachment-2
    .pdf
  • email-html-1.txt
    .html