Static

static

4

Sharing

Copy URL Twitter E-mail

General

  • Target

    Mensajes en cuarentena (6).zip

  • Size

    107KB

  • MD5

    fc21fbb71692988b211dc9c6011cb9d0

  • SHA1

    6935c746cac22ec1e326d4d008df1f3ef8c35e22

  • SHA256

    87f901fafb2c958b271ad183bd799d84dfb195546b4d09f5c53779cca244ca29

  • SHA512

    4cad79d1a272e5565563ca383d61ebeca0369c2120e2d7877470de0f238afe1139fb4e5b8187919d92c308b25ba5593524cbd1135b7fbee53292c43eec184c60

  • SSDEEP

    3072:6QHFPmDsy5vi8BoRw2xvyXMLOmdgCgNoOZK2GvvrKO/3:6QH92Fo62hlLOmdgCgWfHrh/3

Score
4/10
pdflinkqr

Malware Config

Signatures

  • PDF has QR code that contains a HTTP URL

    PDFs with URL QR codes are often used for phishing

    pdfqr
  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

    pdflink

Files

  • Mensajes en cuarentena (6).zip
    .zip

    Password: 22

  • 31f5b4cf-75d6-444f-bb35-08dc75d65738/ab4ceeef-3ac8-6445-d560-350a5b857c29.eml
    .eml

    Password: 22

  • Employee Benefits Enrollment for soniay.rodriguez - ADP.pdf
    .pdf

    Password: 22

    • https://e9b046d8.8be1c954763725f27e1ca06a.workers.dev?email=c29uaWF5LnJvZHJpZ3VlekBhZHJlcy5nb3YuY28=

  • email-html-1.txt
    .html
  • rDyADTih.png
    .png

    Password: 22