General

  • Target

    R&D Innovation & Product Development World Summit.eml

  • Size

    1.7MB

  • MD5

    de594c2ed9c5328f327fb6ad2d50746b

  • SHA1

    d97773cd3dac874aa0265830ecce5c0f3ef7008a

  • SHA256

    120de0d6b13c7b211dfdf571ce9967ed2a77c8e2d7663b0a91ba570ee3dfcb7e

  • SHA512

    66d6aae9c6de792c3fe1f518b3b4665e322c4ecc040849ae2ff2f5e173b2a0f247f491385048ef7b6fcdb6d3bf9e46745c86fccac95f8a7f7bed05a714791a5f

  • SSDEEP

    24576:luOyAAM2BA+1fxH0iaJ8Ps6rCya6Tf6LTtGaFLNmzsEbYtPmJMoKzwjhbyh:lzS15UiBsx187YN8MocU2h

Score
3/10

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • R&D Innovation & Product Development World Summit.eml
    .eml

    Password: infected

    • https://gabrielamartinez.hosted.phplist.com/lists/lt.php?tid=IR07wGESKlOwnLDvAaHTh9PhN9AihrWhp4pFjgfmu3CF3fPWG+F+55BtCumh+3nw

    • https://gabrielamartinez.hosted.phplist.com/lists/lt.php?tid=QW6XAfgO1yKX+oZJM1aHrNPhN9AihqWhp4pFjgfmu3CF3fPWG+EO55BtCumh+3nw

    • https://gabrielamartinez.hosted.phplist.com/lists/lt.php?tid=vPB0WtEYNJqEvaymiiYrZNPhN9AihsWhp4pFjgfmu3CF3fPWG+FO55BtCumh+3nw

    • https://gabrielamartinez.hosted.phplist.com/lists/lt.php?tid=ehpRUwdcC1FXB05UUgRXS1BQBQEVWwgBV0wGB1EFBFVTVwdRDg9EVwdSUlFUUVVLVgMIBBUNDVkFTAUADAIZUAdeBlIBXQ5RVgBTHlsAAQICAlQEFQhaXQVMUFJRVBldAlAHTwZZXQpVBgUAVAwDVg

    • https://gabrielamartinez.hosted.phplist.com/lists/lt.php?tid=ehpXUwBdAQQEBk4EWwUAS1AGAgAVAA9eVUxcAQBaB1cHUFtVV1tEVwdSUlFUUVVLVgMIBBUNDVkFTAUADAIZUAdeBlIBXQ5RVgBTHlsAAQICAlQEFQhaXQVMUFJRVBldAlAHTwZZXQpVBgUAVAwDVg

    • https://gabrielamartinez.hosted.phplist.com/lists/lt.php?tid=ehoBAVAIDwcBVk4GUgRdS1AFCVMVAQxaUEwFVFVVDAUAUFEAAAxEVwdSUlFUUVVLVgMIBBUNDVkFTAUADAIZUAdeBlIBXQ5RVgBTHlsAAQICAlQEFQhaXQVMUFJRVBldAlAHTwZZXQpVBgUAVAwDVg

  • Agenda R&D Innovation & Product Development World Summit.pdf
    .pdf

    Password: infected

    • https://www.cparityevent.com/ticket-details-world-rd-process-excellence-product-innovation-summit/

    • http://.cparityevent.com

    • http://cparityevent.com

  • email-html-2.txt
    .html
  • email-plain-1.txt