General

  • Target

    Messages mis en quarantaine.zip

  • Size

    3.0MB

  • MD5

    b1dfb0ebf02596115b237dda5e7480a3

  • SHA1

    f5d1be1400150759f422569deb3e6ab4f82e0db6

  • SHA256

    f2ad493db05ae4a10076d3f2447cdaa5efb939bd4e92bec0ccaacbab4c1fd5c3

  • SHA512

    9508e04bac3e2a80a07df22f872578f5aea82ef2cf38353bf389041ec5b5055f0b4c3e349a13b1ccd54df2592a8b7c34bbee27660d777d526ba9324ddefb3e42

  • SSDEEP

    49152:cvCwb6abUZ/bww1lJ+GCIXFtuStICVNOk32nS42eR7m2+gWkv:cxIwilJ+bPStI4EkNWSF/m

Score
3/10

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • Messages mis en quarantaine.zip
    .zip

    Password: azerty1!

  • 4a821481-7a12-4f49-d29c-08dc44d68dd6/6c647f3d-b3a1-9c5b-4677-abc029f1b125.eml
    .eml

    Password: azerty1!

    • https://signature.groupecf.com/l/RHpCTFFUSnRGLzJ0TlpkZzl4VEVEUT09-VzNGNG5oU1pWYjZRMTVQMUxBZ2xJZz09

    • https://signature.groupecf.com/l/RHpCTFFUSnRGLzJ0TlpkZzl4VEVEUT09-bDh2a2xCS2VaVHRuaUQzenVMaFphUT09

    • https://signature.groupecf.com/l/RHpCTFFUSnRGLzJ0TlpkZzl4VEVEUT09-MVc4eTk5YXpOcDFSNDR3dDdleFhiQT09

    • https://signature.groupecf.com/l/RHpCTFFUSnRGLzJ0TlpkZzl4VEVEUT09-eFZMaExNZWZGQjMvaVVJaDArTTl6Zz09

    • https://signature.groupecf.com/l/RHpCTFFUSnRGLzJ0TlpkZzl4VEVEUT09-a1RCUlYzaUFUM1hkQTZoV29vMXBjUT09-UEE3WEk0a3o5eU1oZG9rU2twSE9pZz09

  • 5.pdf
    .pdf

    Password: azerty1!

    • https://hal-mines-paristech.archives-ouvertes.fr/hal-01781568/document

    • https://www.ssi.gouv.fr/entreprise/glossaire/c/

    • https://www.ifop.com/publication/les-pme-et-la-cybersecurite/

    • https://www.martinique.franceantilles.fr/actualite/societe/un-gang-de-hackeurs-aurait-revendique-la-cy

    • https://rendre-notre-monde-plus-sur.goron.fr/bpifrance-a-la-rescousse-des-pme-avec-diag-cybersecurite/

    • https://data.economie.gouv.fr/pages/barometre-france-num/liens-jdd#echantillons-des-enqutes

    • http://Cybermalveillance.gouv.fr

    • https://stratcomcoe.org/cuploads/pfiles/cyber_attacks_estonia.pdf

    • https://fr.wikipedia.org/wiki/WannaCry

    • Show all
  • email-html-2.txt
    .html
  • email-plain-1.txt