Static

static

4

Sharing

Copy URL Twitter E-mail

General

  • Target

    Mensajes en cuarentena (4).zip

  • Size

    106KB

  • MD5

    956128ad4e4a012911843ad84b2371cc

  • SHA1

    a3984bf64c605d89f45823f943985269eb1d837f

  • SHA256

    d948dd60c1b750cad96b1e306f94ef417df5fa307d31243600217ee5f212b443

  • SHA512

    a24ffad8ad308651003aff1763460f74b4bffbd6dab7c57e3432b801b91382896a6940a435dae852a0457395c3fa3c118c3f54793932cf06f8c93c8f80a2849d

  • SSDEEP

    1536:r9aRoBrcxNoxoTO86NE9Vpxj1b6iYbfwsrkD59mzm0Kz3gvmXvOsMmeZCRh:TwxNaoTEEHj1b6HPQD3mzsTgvDsxSCf

Score
4/10
pdflinkqr

Malware Config

Signatures

  • PDF has QR code that contains a HTTP URL

    PDFs with URL QR codes are often used for phishing

    pdfqr
  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

    pdflink

Files

  • Mensajes en cuarentena (4).zip
    .zip

    Password: 22

  • c6335a66-1163-4aff-f156-08dc75c7f7e9/2ea8b9d0-d5b3-34af-dd52-a22508c27227.eml
    .eml

    Password: 22

  • Employee Benefits Enrollment for yomara.vargas - ADP.pdf
    .pdf

    Password: 22

    • https://e9b046d8.8be1c954763725f27e1ca06a.workers.dev?email=eW9tYXJhLnZhcmdhc0BhZHJlcy5nb3YuY28=

  • bFPGV.png
    .png

    Password: 22

  • email-html-1.txt
    .html