Static

static

4

Sharing

Copy URL Twitter E-mail

General

  • Target

    Mensajes en cuarentena (7).zip

  • Size

    106KB

  • MD5

    4479b89d6380459a4945a3b069d29f75

  • SHA1

    f6aab203646df973b1fbcf869386653edecf1ed4

  • SHA256

    b25a8d57892ca3d392cacb155c1bf3147e5559397eaaee3f089d1e71d834aa6f

  • SHA512

    c9bde6d7ae84216bce150210906826fdc7beb37205a78d66a534c6089d42808f0cb529fe5adc614aad4b95cd54f4304ebd2b55d09af7bcbe90a22948a83a9fb2

  • SSDEEP

    3072:oWjKPli+r8Y9Vw59RFHC0k6qqhGCY9LR6J8UrHqsapl:oW+xrbiC0k6qqECY9sFrHq9pl

Score
4/10
pdflinkqr

Malware Config

Signatures

  • PDF has QR code that contains a HTTP URL

    PDFs with URL QR codes are often used for phishing

    pdfqr
  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

    pdflink

Files

  • Mensajes en cuarentena (7).zip
    .zip

    Password: 22

  • 057e21b4-a2ee-414e-0aee-08dc75c97c96/810e21c4-c840-f6bb-fdd6-72eff3652aa1.eml
    .eml

    Password: 22

  • Employee Benefits Enrollment for yuri.vanegas - ADP.pdf
    .pdf

    Password: 22

    • https://e9b046d8.8be1c954763725f27e1ca06a.workers.dev?email=eXVyaS52YW5lZ2FzQGFkcmVzLmdvdi5jbw==

  • QkGSIEV.png
    .png

    Password: 22

  • email-html-1.txt
    .html