City of Kechi[.]msg

General

Target

City of Kechi.msg
Size

904KB
MD5

8e84f7899dc2fbc4c7c17ce7d8825e2e
SHA1

9d79361fca3cd369ee7190f3204322a50d4ae56c
SHA256

82cfa0535a404ea697be5f215b8bd651b226a954ea9fdd3ecb4e69c14a0fa2fb
SHA512

61a6b7126363571d5e6781632cec3f7fc46efcf8178b29d3cb3cc1e53fdee12fd1024fdbb3a61edcd3a083723123f3024220c61c6b691f2172f70b4e537bdc97
SSDEEP

12288:RXo/OpopyUEug1Rp7WzxW+T0y5T9r1+2Y2fBae9zInCw23z:C/Opgz8fGnIy3r1R1aeD3z

Score

4^/10

pdf link

HTTP links in PDF interactive object 2 IoCs

Detects HTTP links in interactive objects within PDF files.

resource	yara_rule
sample	pdf_with_link_action
static1/unpack001/kechiksgov.pdf	pdf_with_link_action

One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
pdf link

City of Kechi.msg
.msg
- https://pileustech.cloud-protect.net/app/report_spam.php?mod_id=11&mod_option=logitem&report=1&type=easyspam&k=k1&payload=53616c7465645f5f04971495e71b37ad71fc076c50d10c61ee3154c4b5146eaa48a62ccc33f4d22d009150ef7240241d8af80330d50f7f671de521ca5258ca1af7a73b866a1cb30f2abcbcf3e1c960f5b0b86aa69758501f4095df6ded4ae4b8acc1f060c106a26457137c4cf0389a2073b845b7377944205c8ae30a1044055aa15fcdeca94fa5400ff16565313e05911fd0eb1771f2c8e07f760774260b7912
image001.jpg
kechiksgov.pdf
.pdf
- https://acrobat.adobe.com/id/urn:aaid:sc:VA6C2:aa610aa4-92c5-4c7f-8070-76595832fdc7