General

  • Target

    anniv. spa.pdf

  • Size

    296KB

  • MD5

    3596a28865420ddccaa2b61ac1c88ddd

  • SHA1

    00cb09dc382cc7d3f4ad1ec53b80d92e38bd8a4e

  • SHA256

    4c40c8bd1ec3a667d42ed9812d1a712964bc8c4170f41c9127ac025c388dd246

  • SHA512

    e02ba89a321971903a2512bde85285785cd46fc88199ed4496266b6aa0dbb191573e2004289ecb7e582a39ea12b6860fc6c5cb291bcf0e859fa52a06d2e682fd

  • SSDEEP

    6144:G4luaLOiQh3G8xpn3fq44rv2z6Af3gOwooK5AoIaXo2f/:G4luaLtQJr7nKuOAPgnxSxf/

Score
4/10

Malware Config

Signatures

  • PDF has QR code that contains a HTTP URL

    PDFs with URL QR codes are often used for phishing

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • anniv. spa.pdf
    .pdf
    • https://www.thegiftcardcafe.com/my/accountOrdersNum.php?cert=031132253138

    • https://www.thegiftcardcafe.com/my/accountOrdersNum.php?cert=049022226138