General
-
Target
94872ae3-48ec-e562-722e-926732f29593.eml
-
Size
157KB
-
MD5
6ea10d3fa427213cda4fda4991645c0c
-
SHA1
94d055536553c5dd450fd958d0410dc2cfb37d51
-
SHA256
2741a5399663273cef5fdeae42265c73645812c8abd9ddc2b597f5eb81767b11
-
SHA512
c193e3e389d9a9fee80613a7a61ca68891542d087d0dc1fc9d5cbc2459d798af2aca5c0f0117a097f0b583686fb1fe5eb565601651cdba03b0650b156c619a94
-
SSDEEP
3072:qIpMUbYKsI/7MTRB00dYfU9zyMhEt1oz9mcYDq00rMOkc:NpdDMA0dYOhhEt1aYGTV
Malware Config
Signatures
-
One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
Files
-
94872ae3-48ec-e562-722e-926732f29593.eml
-
https://www.dolormed.co/assets/img/logo.png
-
http://190.85.249.87/wsSS_factu_electronica/rest/wsFactElec/getAceptar?
-
http://190.85.249.87/wsSS_factu_electronica/rest/wsFactElec/getAceptar?code=82aa6b4a4586b0fde1597cab3ee0ba73272d18657acc84452b996eb51c0507c7a0c41e77e21a38b4551d8c77770a883b&aceptar=1
-
http://190.85.249.87/wsSS_factu_electronica/rest/wsFactElec/getAceptar?code=82aa6b4a4586b0fde1597cab3ee0ba73272d18657acc84452b996eb51c0507c7a0c41e77e21a38b4551d8c77770a883b&aceptar=2
-
-
ad09004429300002490103791648517.zip
-
FEDM48517.pdf
-
http://040V.total
-
-
ad09004429300002490103791648517.xml
-
email-html-2.txt
-
email-plain-1.txt