20240403 - LLA phishing incident reported TLP AMBER V1[.]pdf

General

Target

20240403 - LLA phishing incident reported TLP AMBER V1.pdf
Size

770KB
MD5

4d23f9017c5a86c1f03a303a2b51cf73
SHA1

acee7f381030d1011d01ef839e04208a2f90de45
SHA256

581926400593629e66631e28ae5fb343281cd7443f18fdf90e204bdb0f726f90
SHA512

97d055cee4aba66141cc30903dd9cadf5b38da164bbf1280510792bb0249100693d6e59f21855351a952bf0a9ef7cf1c871b14d3a6d2fed5ef5f258733fba924
SSDEEP

24576:bKLXny+D28u18JVRNWgGQCYEH9lgJis1z426T:bKLXy+C8u1uNzGQCF9lgJis1/6T

Score

4^/10

pdf link

HTTP links in PDF interactive object 1 IoCs
Detects HTTP links in interactive objects within PDF files.
pdf link

Processes:

resource yara_rule

sample pdf_with_link_action
One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
pdf link

resource	yara_rule
sample	pdf_with_link_action

20240403 - LLA phishing incident reported TLP AMBER V1.pdf
.pdf
- https://drive.autodesk.com/de28a18e1/shares/SHd38bfQT1fb47330c99705935314d523055