General

  • Target

    5347499f-97da-733b-f212-885380fa714c.eml

  • Size

    39KB

  • MD5

    fbd747f6ea64a1ced31a1831309afdde

  • SHA1

    e673ec06e06f4d727bff18346c68f8e63b388276

  • SHA256

    3e7f3734bb9fea506514238e13242c843cd3713365d61f051c9b9653ed4cf8c6

  • SHA512

    778917500176aaea56e7358ac0c12d739d8a2e6b64db4f4494700ebae3ad555486d69b330d3b627f29aad7585db0e5c8141fe732fac3fc092d553e199ddd3c07

  • SSDEEP

    768:yrHUvo2JJqqozdNd7ed3JedkezedEEc8dOJo4DhK7MQZuhjBYnq7DgP:yrHXcJ4nFedJeGezeqEbkyOhyuhOYk

Score
5/10

Malware Config

Signatures

  • Malformed data in PDF

    A PDF can contain malformed data to evade detection

  • HTTP links in PDF interactive object 1 IoCs

    Detects HTTP links in interactive objects within PDF files.

Files

  • 5347499f-97da-733b-f212-885380fa714c.eml
    .eml

    Password: infected

    • https://ova-nbdjbdhj-zxbxhx78x56x67x98sbnhi-nmkswjhwui2768563mndui-09mn.replit.app/#[email protected]

  • Contract_document.html
    .pdf
  • email-html-1.txt
    .html