General

  • Target

    Quarantined Messages (47).zip

  • Size

    509KB

  • MD5

    82a72c9fe4b935211345cd57939e8f3a

  • SHA1

    7cd8799dd97e8b910cc2d81f479b307ddcde9add

  • SHA256

    67198dfdba5334d1a85f5ff1d02cd224d3c8da3dfb1a026bdf5c006c0eb8afbe

  • SHA512

    0a3a9ccabfd997eb0d1d2ef410059191b0ecfc07c938151163ac24d10f2f89b658a4073fc50cda003d4871be138de722b9d0067140cb1c06082134f4439d8955

  • SSDEEP

    12288:S7QYo4C0zgGSOwtzj/0KAed2oZyhMepOUJ/mvHisOvCsBqW:7vtzj/AkpZ5eUUJ/mq5sW

Score
5/10
pdf

Malware Config

Signatures

  • Malformed data in PDF

    A PDF can contain malformed data to evade detection

Files

  • Quarantined Messages (47).zip
    .zip

    Password: infected

  • 749e8676-908e-4ee3-e209-08dc71505434/d6ca5f11-16ed-a6a9-6de7-a13d3680b162.eml
    .eml
    • https://upperottawa.cortico.ca/patient/documents/download/7c52a88acde14a49a3a408a9238e6648.pdf/gAAAAABmO9hf7kGlOBMT1iGzIDzzRjuhxvF6Cy43_u4493QSCUgCmRs320RVhOMaJ9E5AtY2vR0eodO-3-kHab56280BxRIlv5NdB2ucsX3CBHDFSrKaraE=/e/

  • 7c52a88acde14a49a3a408a9238e6648.pdf
    .pdf
  • email-plain-1.txt
  • email-plain-2.txt