Overview

overview

4

Static

static

4

tickets.pdf

windows7-x64

1

tickets.pdf

windows10-1703-x64

1

tickets.pdf

windows10-2004-x64

1

tickets.pdf

windows11-21h2-x64

1

tickets.pdf

android-10-x64

tickets.pdf

android-11-x64

tickets.pdf

android-13-x64

tickets.pdf

android-9-x86

tickets.pdf

macos-10.15-amd64

1

tickets.pdf

debian-12-armhf

tickets.pdf

debian-12-mipsel

tickets.pdf

debian-9-armhf

tickets.pdf

debian-9-mips

tickets.pdf

debian-9-mipsel

tickets.pdf

ubuntu-18.04-amd64

tickets.pdf

ubuntu-20.04-amd64

Resubmissions

24/04/2024, 21:04

240424-zw3ldshe7w 4

24/04/2024, 21:01

240424-zvczcahe4x 4

Sharing

Copy URL Twitter E-mail

General

  • Target

    tickets.pdf

  • Size

    40KB

  • MD5

    3f1f1276b85598aa8fc8e5b1a477631a

  • SHA1

    38e75526ea5474f2febb0a11799c093401ab80a1

  • SHA256

    13753cffa0acc99d7c6c9c078e0395f974c1507b560a61922f34c98aa81f6135

  • SHA512

    df84ce0cc51fe85b5150abe5abfe18776ba9ada92169d5ac70160c19fa93ad07a34eea9213c592898fe0614764f7b5ed5f9d98ccfbdb73d6b88f1df10ed9ed46

  • SSDEEP

    768:8o0dSJ9kcvirF8w2teXzhrFQux3k+23qNoYqo9iETOF6QQnwS:1TeXZ2XJ6NLqoQWOFawS

Score
4/10
pdflinkqr

Malware Config

Signatures

  • PDF has QR code that contains a HTTP URL

    PDFs with URL QR codes are often used for phishing

    pdfqr
  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

    pdflink

Files

  • tickets.pdf
    .pdf

    Password: mytickets

    • https://www.wixevents.com/check-in/2W0J-NGZP-SKM1P,d8bf5333-cecd-4881-bdd7-e00e15196521