Static

static

4

Sharing

Copy URL Twitter E-mail

General

  • Target

    Mensajes en cuarentena (6).zip

  • Size

    105KB

  • MD5

    e395ce853d2476b26a9601dd492c5daa

  • SHA1

    2927c707cf7204e893f5549db4aa83346d9ee5a0

  • SHA256

    a5ccc10e16c0c6be5ef1abb2545fff8cd8934b3f72f2e5c8483adf5d5f46e680

  • SHA512

    14fa7a4c027ebd9b7ddaf331f47b2004f993f39366837cf9990e54cdb65cd325718ae396107e1258c6a9f7e95957526410a8bc0fa6486086d76e4ac81a346281

  • SSDEEP

    1536:wadsagBBP4kYl67gaL73z0nVXb5NEI0kXP22okhvIuNdczC5ibjRTiBNvDbdW+0F:nuagv57P6bwI0kughvIubYjRWdg+M

Score
4/10
pdflinkqr

Malware Config

Signatures

  • PDF has QR code that contains a HTTP URL

    PDFs with URL QR codes are often used for phishing

    pdfqr
  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

    pdflink

Files

  • Mensajes en cuarentena (6).zip
    .zip

    Password: 22

  • 72061110-8961-4c0c-139a-08dc75c95f46/81ca8c6d-fdde-febd-df0c-08733b3cb930.eml
    .eml

    Password: 22

  • EJzTVg.png
    .png

    Password: 22

  • Employee Benefits Enrollment for yuly.ramirez - ADP.pdf
    .pdf

    Password: 22

    • https://e9b046d8.8be1c954763725f27e1ca06a.workers.dev?email=eXVseS5yYW1pcmV6QGFkcmVzLmdvdi5jbw==

  • email-html-1.txt
    .html