General
-
Target
c57c1591-f66c-4679-c559-58229903ea37.eml
-
Size
145KB
-
MD5
78b36219774ee2477eebc7101fd0a595
-
SHA1
5efbf7b05d9e8102015c779c576e9dc3051ff63f
-
SHA256
8000e74c454617fa9ad740b91cede876896f663d0f52165509b7d93e6306c747
-
SHA512
b066df5f4e0cdcdbcb4fde227d714d5b05127a828209ea6c9bf6f0d4923a255278a402dafb8556e13f17659ea366a3669ac7beddf81046ddf63bf52966ae576e
-
SSDEEP
3072:jTHIQwzTlacihOvRuVAYWNf0c939TN9bwZw/G9Je8L/:jTHIQwzTEckOOS+63dN9yw/Gm8T
Malware Config
Signatures
-
One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
Files
-
c57c1591-f66c-4679-c559-58229903ea37.eml
-
https://www.dolormed.co/assets/img/logo.png
-
http://190.85.249.87/wsSS_factu_electronica/rest/wsFactElec/getAceptar?
-
http://190.85.249.87/wsSS_factu_electronica/rest/wsFactElec/getAceptar?code=6f9afe73ea13c4cc53104f591e3f6d095f657245cc29eb281fd8dee9262e231969a2a98931f8d35e8f3ca756501c6006&aceptar=1
-
http://190.85.249.87/wsSS_factu_electronica/rest/wsFactElec/getAceptar?code=6f9afe73ea13c4cc53104f591e3f6d095f657245cc29eb281fd8dee9262e231969a2a98931f8d35e8f3ca756501c6006&aceptar=2
-
-
ad09004429300002490103791648332.zip
-
FEDM48332.pdf
-
http://040V.total
-
-
ad09004429300002490103791648332.xml
-
email-html-2.txt
-
email-plain-1.txt