General
-
Target
Volvo_Group-fyrfTj0.pdf
-
Size
79KB
-
MD5
d134b730bfe0d044d540601faf0c975c
-
SHA1
70d0acf2896892df90f7842025192f1c4aa6c0de
-
SHA256
26ee39088477e72e581fa34385096b24f91d0f63e7adb1640413ddb49d2b27e7
-
SHA512
949cfc6cc8495b1e662f2ed0b794ac32369b72e3cb33e0dcc7a2f006cb1f2678fbb873546bafe661a7ce187478730e054cf20cb3cd78db3b73259834d0e7de04
-
SSDEEP
1536:w4QF7bOnCVWw83rcK6DTkSJXAUgFVZWzAeeQ:QCIMwjPfgFVQAFQ
Malware Config
Signatures
-
HTTP links in PDF interactive object 1 IoCs
Detects HTTP links in interactive objects within PDF files.
-
One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
Files
-
Volvo_Group-fyrfTj0.pdf
Password: 2x2=4
-
https://opodo.onelink.me/RnQA?pid=CRM&af_adset=email&af_ad=crm_nl_PDA_SneakPeek_NP_X_290124__&is_retargeting=true&af_dp=op-app%3A%2F%2Flaunch%2F%3futm_content%3dUL_hero%26utm_source%3dsf%26utm_medium%3dcrm%26utm_campaign%3dnl%26utm_term%3dXX-XX-CRM-E-NL-PDA-FL-X-NP_PrimeDay8_NonPrime_SneakPeekAPP_290124_Render_435150%26mktportal%3dNL&af_web_dp=https://singoffice.org/7453htr/0458/new/new/[email protected]##
-