General

  • Target

    From 3624185676(Message NO.8567) 04102024.msg

  • Size

    484KB

  • MD5

    02a489dd671e3d9f3ebe927444e30a97

  • SHA1

    dc5950d33f9033bec111bd41f8c30f4b25ac6fd4

  • SHA256

    f8d007a5529fce8a39c833a5dc8fb5c41a24e757ef27ec3a2954610f45ca2323

  • SHA512

    d4758ece8468c0e3c853da964e113b071ce5f82ed3e2f1cd526d2a614dd58dbbd697cdb546b526a654b8fad3444256d7c0b8f9c36acc5291b7b5e950dafc0b62

  • SSDEEP

    6144:NEqiZ/1dM5MGtxQ+BMLeQsuVfDmdk2lNgwhK2uIObi2H5Wu4444444444444444Y:NknUMUBWe3aihWwYrIOfk8

Score
3/10

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • From 3624185676(Message NO.8567) 04102024.msg
    .msg
  • 0be2f431a7554481c110b20c3166371c
    .jpg
  • Twdb 855208.pdf
    .pdf
    • https://ss574.app.goo.gl/?link=https://events.conclaves.org/?upn=dGluYS5uZXdzdHJvbUB0d2RiLnRleGFzLmdvdg==&upn=dGluYS5uZXdzdHJvbUB0d2RiLnRleGFzLmdvdg==6TF2-MFTD8U-DNB2%Twdb.texas.gov####//////855208.pdf&ibi=com.engie.servicepluspro&ifl=https://itunes.apple.com/fr/app/engie-service+-pro/id1162700544?mt=8&ipfl=https://itunes.apple.com/fr/app/engie-service+-pro/id1162700544?mt=8&ius=engieserviceplus://notification/notification?notificationId=1765643%26action=facture%26contratId=0%26factureId=220004588275%26numeroCompteContrat=300001700428