General

  • Target

    a5834c2e-c765-85b2-a3bb-f379403b1342.eml

  • Size

    162KB

  • MD5

    2a73aad22144df5b6b23e48e17337404

  • SHA1

    bc23f89db92929eace728595b93aeb806020ae83

  • SHA256

    6908164344995e9b5167cfea10891687a0a693fbd899564981d23ef133064845

  • SHA512

    35585252564e8d67a0fe7ec33e67f0f0aa2ba116819f60e7646122a862d92bbdfae06c1756385498bd972815dc4bdcebffaa35f9ebe5e8597ae4f5fe4fbee3f8

  • SSDEEP

    3072:b5P6JxWP9N2aFxXb7fgbL1zgNcHE2NQo4apLuqqxeTZ9Vt3y:b5P6bcNTxrkbSt0HDLuleHy

Score
4/10

Malware Config

Signatures

  • PDF has QR code that contains a HTTP URL

    PDFs with URL QR codes are often used for phishing

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • a5834c2e-c765-85b2-a3bb-f379403b1342.eml
    .eml

    Password: 0

  • Employee Benefits Enrollment for valentina.angulo - ADP.pdf
    .pdf

    Password: 0

    • https://e9b046d8.8be1c954763725f27e1ca06a.workers.dev?email=dmFsZW50aW5hLmFuZ3Vsb0BhZHJlcy5nb3YuY28=

  • email-html-1.txt
    .html
  • sbmomZr.png
    .png

    Password: 0