General

  • Target

    [Possible Spam] [AM..eml

  • Size

    324KB

  • MD5

    d8b1df430d86d72257bbb703131cbd79

  • SHA1

    3b73005d381f786fa6d885cafe19ca76384d51b4

  • SHA256

    5a5d55841040e3347be89b4ef1fecda28c94c1049ecbdc88f5b51de0305b4303

  • SHA512

    cb2d9a92ff26215a7536f107ff1576e3f2c75a76038c6ad334726f3e0b25135e8133f78d4c3a7959e0d2ac4e5e21be5f1ed8d10f72e1a8d086b770d5a5953f94

  • SSDEEP

    6144:tqL34HrNzeF0R4h0+wUfS/soZwJCbXcE/TNdEx8HDsnkQquK3C2:E34+e+wUfSXJjdNuDkQquKy2

Score
4/10

Malware Config

Signatures

  • HTTP links in PDF interactive object 1 IoCs

    Detects HTTP links in interactive objects within PDF files.

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • [Possible Spam] [AM..eml
    .eml
  • NEW QUOTATION REQUEST. ORDER DETAILS ATTACHED.pdf
    .pdf
    • https://asset.cloudinary.com/dlyyxizpg/6ab02f0b418169ebe38db5874920200d

  • email-html-2.txt
    .html
  • email-plain-1.txt