Static

static

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    past due invoice #09063119.zip

  • Size

    101KB

  • MD5

    9682ff91a3206c36b138ba2d06300d1d

  • SHA1

    e1930b8825b96ee7be8af66a4f50377efda7bca7

  • SHA256

    f430b611b2a456ebc4fb11936a55ad004d81a285cbc41060923926aab74726ae

  • SHA512

    02ee08b9f6075954170cf7bc925fb6603679043147ea5e5ea8b85b276f14b875f91221bae3550a9d342c78104889126e5276b43c783ffeac57726de9416daeaf

  • SSDEEP

    1536:H4GYRljox+zR1ZqSnI/ZEIuqhfIisTXAz7YUX5Fxg2Lk5wZ+hT9phm9tvVDkw5:3A/Id/ZjuqyBAgUpFxgnwyTW3R5

Score
3/10
pdflink

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

    pdflink

Files

  • past due invoice #09063119.zip
    .zip
  • Invoice - Reminder Your payment to Skadden.msg
    .msg .pdf polyglot

    • https://c30.qbo.intuit.com/qbo30/ext/Image/show/1/47993183862393829285597631887775?

    • https://plugin-qbo.intuit.com/brand/1.1.9/product-specific-brand/assets/quickbooks-payments/logos/qbeinvoiceemail.png

  • Invoice_7111_from_Skadden, Arps, Slate, Meagher & Flom LLP.pdf
    .pdf

    • https://apllicam.com/Corporate-financial?id?=3884&pid=9090280

    • https://apllicam.com/Corporate-financial?id?=6&pid=3993744

  • Invoice from Ceva Logistics.msg
    .msg .pdf polyglot

    • https://c30.qbo.intuit.com/qbo30/ext/Image/show/1/52603851623286667336982345334435?

  • Invoice_4624_from_Ceva Logistics.pdf
    .pdf

    • https://apllicam.com/Corporate-financial?id?93744&pid=88364

    • https://apllicam.com/Corporate-financial?id?=883984&pid=0029934

  • past due invoice #09063119.msg
    .msg .pdf polyglot

    • http://www.xpo.com

  • 00048635604 14-2-2024.pdf
    .pdf

    • https://t.wxb.com/order/sourceUrl/1894895?url=https://miosecurezza.com/Financial_access