General

  • Target

    Urgent Action Required_ 2024 Annual Leave Guidelines and Registration on New Portal.eml

  • Size

    31KB

  • MD5

    dcb35e752f12b48f14cbc8ef5a7f0f1a

  • SHA1

    c8fbec24dd0bcae3b9e6282fa79cdcff5c1aa8cd

  • SHA256

    7ea64b4d1ec83162fe1e8164578fbee94f011c50d38b704b0f28eeb70be56829

  • SHA512

    588d2c5e5f7e74d16ec7d899e9c0c45979c48e44b12a5567ee0db94fd4f8a8ef1aaeb23e3251b56c60c01d85a8fedbc9ed60d38bf2caea567c1f4b4b9bdc5f4c

  • SSDEEP

    384:/0h1YIL4O1H8C922KVpImzgzsI/kTRn66PadoHz4A+20Ac/Np7KbIZiPFaZbv0/T:4RdB93X978RuW4U0A4p7sgaFmr0YE

Score
5/10

Malware Config

Signatures

  • Malformed data in PDF

    A PDF can contain malformed data to evade detection

  • HTTP links in PDF interactive object 1 IoCs

    Detects HTTP links in interactive objects within PDF files.

Files

  • Urgent Action Required_ 2024 Annual Leave Guidelines and Registration on New Portal.eml
    .eml

    Password: infected

    • https://webmail-xxxgjllk8989876653-mklqwui892672r52-mkopsoi980276256562.replit.app/#[email protected]

  • Contract_document.html
    .pdf
  • email-html-1.txt
    .html