General
-
Target
Csenergy_Contract_Agreement_20240415.pdf
-
Size
42KB
-
MD5
3e6a20c3d8b7dff6bdf0d13b6e1fbf44
-
SHA1
8d25ecf802d92720e5ce606c79bd4b906e422b69
-
SHA256
d3b44d70fb3bb8b068fde4e6ce6775e97bdab32f17d7b7d91cc6cfb52eeabb88
-
SHA512
f07f796edd51bcd627b17e33f7d4897f118370520466d2dbf339e9ed2677b634a2e76f18ff0083945fb76b40020a0fecc11f624c26b9749793bfd301f99372e5
-
SSDEEP
768:PqFQVn1aUZY+tTP7zj+KjnMskRhIh69ppsn46/I69pmIXxp8BALdF:4gwU/TP7nARhI49ppQJ9bXb8BALdF
Malware Config
Signatures
-
PDF has QR code that contains a HTTP URL
PDFs with URL QR codes are often used for phishing
-
One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
Files
-
Csenergy_Contract_Agreement_20240415.pdf
-
https://contactmonkey.com/api/v1/tracker?cm_session=6cb0d7b4-7514-49ed-a422-137958b36105&cs=d01410f1-e93a-498a-bdf9-aed95ac45c9b&cm_type=link&cm_link=c38d4278-31b3-4240-b05e-868db3a168a7&cm_destination=https://contactmonkey.com/api/v1/tracker?cm_session=78cba606-7071-447f-bc39-16d7e80cd3c0&cs=825ad42b-2c78-40c6-4332-qnomyikoa564&cm_type=link&cm_link=0da11854-d710-40c4-08390-bcd92bcc7ee9&cm_destination=//firmrendering.com.au/wp-admin/ID4/51704Csenergyon793dlxj/YXZhcnZhcmlAY3NlbmVyZ3kuY29tLmF1
-