Static

static

4

Sharing

Copy URL Twitter E-mail

General

  • Target

    Mensajes en cuarentena (4).zip

  • Size

    107KB

  • MD5

    6a406182c5161613f20bfa84a9288dca

  • SHA1

    90c1ba4ed1186f1a4118998d08cac83411e8c6ed

  • SHA256

    8003348a85f7f29e574bfbf930d31740acaf28b3917f016dfbb504eaca4a7b7e

  • SHA512

    be440ff14094601e8a198afe243c57f8f59be1e9f9f1cbb735096fd76f330ed24eb2c6fd59fcecfab7d2e7b4c382e709b22c4ee9d496c5ea2a740a606401260c

  • SSDEEP

    3072:9yFkZ+qhK8m8mNX3un8HpwcYJEAqSq4D5AnZb42rveiHaLFm0:9ataK8rmNu/JEzx4+nGiveiHaB5

Score
4/10
pdflinkqr

Malware Config

Signatures

  • PDF has QR code that contains a HTTP URL

    PDFs with URL QR codes are often used for phishing

    pdfqr
  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

    pdflink

Files

  • Mensajes en cuarentena (4).zip
    .zip

    Password: 22

  • 3909044c-5b2c-41aa-bcc1-08dc75d5412d/df643823-5923-868e-9045-b5050846f001.eml
    .eml

    Password: 22

  • Employee Benefits Enrollment for soledad.chaparro - ADP.pdf
    .pdf

    Password: 22

    • https://e9b046d8.8be1c954763725f27e1ca06a.workers.dev?email=c29sZWRhZC5jaGFwYXJyb0BhZHJlcy5nb3YuY28=

  • email-html-1.txt
    .html
  • nCCStAm.png
    .png

    Password: 22