General
-
Target
Whitelisting Instructions_V11.pdf
-
Size
210KB
-
MD5
3897636c6277f20d793b2c7b36570e1d
-
SHA1
82252f2906789a5ad6ea1900f315d36b058375bf
-
SHA256
e59b74ea65aca5af42295f8973028e6ab85790aacf945de05a873d014cf83ccb
-
SHA512
bdd6f2e72a339b3b508a79f8342a2d3066ff694e99948ed9ba4141c4316a8da0d84d2c645f216833f258b8114589eeba162f7f99d9b7490edb23bdd18b5c7c1f
-
SSDEEP
3072:48R2331Rr+NbXzp90TXShylxzAU6zUeQkJihno4tIShc:hkVRr+JV90TXMYxzAU6AyghnoqIMc
Malware Config
Signatures
-
One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
Files
-
Whitelisting Instructions_V11.pdf
-
http://223yourdomain.com
-
http://223spf1.yourdoimain.com
-
http://223spf1.yourdomain.com
-
http://-allspf1.yourdomain.com
-
http://spf2.yourdomain.com
-
http://dmarcian.com/spf-best-practices/SPF
-
http://aristotle.comwww.aristotle.com
-
https://easydmarc.com/tools/dkim-record-generatorScroll
-
http://www.dnswatch.info/dns/dnslookup?la=en&host=Key01._domainkey.aristotle.com&type=TXT&submit=Resolve---Provide
- Show all
-