General

  • Target

    Quarantined Messages (3).zip

  • Size

    387KB

  • MD5

    61e62e629152cbc0b9bea4e034f3aa6c

  • SHA1

    9dae16007a28adce610e45bf5576bf09acaff175

  • SHA256

    b53d560a35d6ca964188cf8dc9fa7db5436430772efe20a5f32d74395c6d9253

  • SHA512

    d7b441c3d6a427f99143d7917ce1d22d629cd100728cd36d12f9c082bc5736dc5dee83321f57a8b1a34aadfce98f5c31e5a7c488761ab40a587ada1a5632472d

  • SSDEEP

    12288:x05fX8N276ADpxw2PI3U37dLlkrcvKm31yt:x05fM+pxrPIkrvVM

Score
3/10

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • Quarantined Messages (3).zip
    .zip

    Password: 123456

  • 44416d7f-35ca-4bb3-062b-08dc1044f146/108245b2-36db-41ea-cf46-e2a84216316a.eml
    .eml

    Password: 123456

  • attachment-2
    .png

    Password: 123456

  • attachment-3
    .jpg

    Password: 123456

  • attachment-4
    .pdf

    Password: 123456

    • http://gkml.co.uk

    • http://Pagewww.gkml.co.uk

  • attachment-5
    .zip

    Password: 123456

  • Invoice SI1915595.pdf
    .pdf

    Password: 123456

    • http://gkml.co.ukwww.gkml.co.uk

  • email-html-1.txt
    .html