Resubmissions

23-02-2024 14:49

240223-r6559sbd27 6

23-02-2024 14:32

240223-rwlc4sba98 4

General

  • Target

    Account Alert (7883).pdf

  • Size

    167KB

  • MD5

    0dd631952134f2fb35878cc0475e99d1

  • SHA1

    70a64688946333e931eeaadd9a24089f441fd933

  • SHA256

    d5400f5154f274aaf69c484b0f5756bf72590f398db6de792efcd1ea0849cfe9

  • SHA512

    d5730292d92db875d9a36208fe38ef2a51f610d58e71edacf3ebd9ac65e14d53d93770e62022334297280df6c15374bef887aa1c6bef3a3aab052047180644fa

  • SSDEEP

    3072:Wfv7a5V0QLF5PsefOTEOGfW0qckCpOJGmTE/BaLJ4qE7EGbmq:wDa5V0EPsUOGfWqkCMJuaLXEQq7

Score
4/10

Malware Config

Signatures

  • HTTP links in PDF interactive object 1 IoCs

    Detects HTTP links in interactive objects within PDF files.

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • Account Alert (7883).pdf
    .pdf

    Password: wetgwgwe

    • https://mparrdo314.000webhostapp.com/ATT/attinc/and_login.html

    • https://sentinelacercas.com.br/cs

    • https://hh99h.app.link