General

  • Target

    PW_infected_3M Order Change PO POR345330 - 4026393373_PDF.zip

  • Size

    27KB

  • MD5

    00ce20a565086439483e51264ba79d91

  • SHA1

    d7bd4bf0e11d21b78b1bf154ca05915a4a59019a

  • SHA256

    3b1d8d63023487dd9cea52384750847e512b2963e4704616b47388963b94a4e7

  • SHA512

    b128b4b3a74f0e995a46f0534c77d9018498fea8517755ba26536be2e50f694db6586d849c8697452fa735980d940eee39506c461cc332291a259a7025bd7483

  • SSDEEP

    768:hybcsQlEe+iQz171X8YhHrNCHxSCIpNmBkVf8T/TPEVL:hy4sQQiAF1MYhHYapTtKrIL

Score
3/10

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • PW_infected_3M Order Change PO POR345330 - 4026393373_PDF.zip
    .zip

    Password: infected

  • 3M Order Change PO POR345330 - 4026393373.PDF
    .pdf
    • http://go.3M.com/sale

    • http://mmm.com