General
-
Target
40feffb1-a47e-d14b-3be6-9e6cefe8bb52.eml
-
Size
121KB
-
MD5
25fe5810e208c1ac35b2cd26c341c569
-
SHA1
f334c53687af64a7c5f1bc0709ad2a015434c182
-
SHA256
f365bce9596b2b90643da4ef348817fdebece48b2b4327c50a2ecd200531325e
-
SHA512
104fbc5fc05856547b5c4e92add53bee8a753b1eb020e94253570345dc11fa3a5436bd6804eb8714f3e101757efc8f849f0faa26b8b70bef75accd2f67cc17db
-
SSDEEP
3072:xxgUuxSoMg5lbXibkjvTIQbEhK5R3p1jUCm/:/6coHb7jvTIQYhKwCy
Malware Config
Signatures
-
One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
Files
-
40feffb1-a47e-d14b-3be6-9e6cefe8bb52.eml
-
http://email.masivapp.com/ls/click?upn=u001.dcZjWc0agOsBdBEb-2Fk8z3cEjjKCubuvEPapq4UFCpGNNnlXXD6hS3AU9Xhf9CJGEeehjGqf23KK9dFPSu109i580Vwlog0Jde0QvCQck-2Fpj4Vis034F1e2NxAAUibDISi84BeIyYUKE0PQ5gUL9xNlEFewSePeYt-2F0SZb2DaEUjAaLdrl9PzvoXgebRP7i84AF-2FQfhoQqOCF9t6gzGWvHrKf-2BE4gze252g0sxc2fibwffL0DWUIQP-2FKtZfiqIlHxLo4PdQ8e1KQgPCnXkIfN-2BZ5nKEi9U9h-2BngzzoRnZOq73YeSy1ia-2BVa-2BRFBga8HLRb1ef_fgtsPp8QJBP9fpehk9RFRDAavbltffjXzB54XAhIFFe6NuZmq9LKF-2FRPoYsdSft96POKMYdckDrtkkKkJfVLdWOCpHXvjoFhF-2B9CnUqjgop2mDFwBzJKcst-2BlJGEDu-2B0tE6dgL4J8S9EN6rblGU9Jz-2Fc3jd-2BPIs99TE1RWGKnOy2L3kplT0gCKGLNtSSjxGb-2Flpe-2B91Wn1SvljnhxMaLsYmxAcVIndjgKzfJGUV-2F1HNeifu0hbUAd-2FBg1U-2F4HP3tZV1lpCOS-2FF9lSJZT2c142oYsXc2HmRA3aCleUNZJn-2Bf8tLMgYefZyJcmm8XUpTTWC-2FW9Tvam3radCiF326LyGrOw8OML3U8hnE3jmCxUj4TjJbjzXskz-2BjJWQsuGpBF8vk2pXCnihuV88Sp2ZWAiihcN5wiTUr7v-2BG4-2BooX6m0Y1jC724W3zchKVs6xUGeCYoCN60LkEsilEERYtj5NOCAVlUzLTumfhkd8x7POiPvmtllUZakk5p2H8DfYGqdjIJRR-2B4t1Vn8CXLVGMj4d1SmICQ3IHJytLRfyUZQowLuTDh1s7ymZu8XY1MOKcLMK1PSQEBn2tTOkbghi292mcKA-3D-3D
-
-
IQ051009179055.pdf
-
http://adres.gov.co
-
http://davivienda.com
-
-
email-html-1.txt