General
-
Target
westtexasgas.com-93L9vdf-3.pdf
-
Size
51KB
-
MD5
01ac44c92f4999e5952a483d1af2b341
-
SHA1
99d3dad61f25c63f5d60599a6b649909b8398265
-
SHA256
af276f55aa39239f8dde9d4d1e3e0f36f390d134db8833f1e60ea37e2d0d9356
-
SHA512
595bc17677ca4ec9a17625d976e5c150fa8a5974f3e5312c6d7e65fbd2bb395f544f6828313790354658827902a889dfe8899eb3e7daada14798b0582c065236
-
SSDEEP
1536:wZUX/OuQBPgK9NkZqnrJuoCPS8oihCYfL:0mDugKfxo6bihCYj
Malware Config
Signatures
-
HTTP links in PDF interactive object 1 IoCs
Detects HTTP links in interactive objects within PDF files.
-
One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
Files
-
westtexasgas.com-93L9vdf-3.pdf
-
http://DocuSignwesttexasgas.com
-
http://wtggas.com
-
https://opodo.onelink.me/RnQA?pid=CRM&af_adset=email&af_ad=crm_nl_PDA_SneakPeek_NP_X_290124__&is_retargeting=true&af_dp=op-app%253A%252F%252Flaunch%252F%253futm_content%253dUL_hero%2526utm_source%253dsf%2526utm_medium%253dcrm%2526utm_campaign%253dnl%2526utm_term%253dXX-XX-CRM-E-NL-PDA-FL-X-NP_PrimeDay8_NonPrime_SneakPeekAPP_290124_Render_435150%2526mktportal%253dNL&af_web_dp=https://matsyakanya.com/logs/9767/new/new/[email protected]##
-