General
-
Target
Quarantined Messages.zip
-
Size
21KB
-
MD5
2301a75d9ce6140d9983da92e53c8ed7
-
SHA1
0fe8622f82412c0a8b6fd33e29d4b9b017a79bde
-
SHA256
c83f73798e62b385d0a27036cbf133e736b8cd0f2b696b07dba5d5321255e739
-
SHA512
23807eca76a9e1d652c66a8291cd70e4e26230b124428209d9e9fb6740fc7ad67c08b92fb603cba6c185d8e7b93cf6bf7a157fea4ce500f0844850cb6819d74d
-
SSDEEP
384:YDjOU5LlurOwHaXepaWkki46XokECV4vZwjmy9eZfYJozzBnsLJQCVhVznQwD+9:4SWuSkaGvSZEBvUeZAUZSHV7K9
Malware Config
Signatures
-
One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
Files
-
Quarantined Messages.zip
Password: 123456
-
40ff7e62-717a-44c7-c09b-08dc6953b50f/bb6c22ef-6fa1-1574-4e94-4dcc2a185801.eml
Password: 123456
-
http://www.voxelgroup.net
-
https://www.voxelgroup.net/privacy/ca/index.html
-
https://www.voxelgroup.net/privacy/en/index.html
-
https://www.voxelgroup.net/privacy/es/index.html
-
-
attachment-2
Password: 123456
-
attachment-3.pdf
Password: 123456
-
https://ecf.dgii.gov.do/testecf/ConsultaTimbre?RNCEmisor=131623751&RncComprador=151551551&ENCF=E440000000048&FechaEmision=30-04-2024&MontoTotal=7,900.00&FechaFirma=30-04-2024%2022:12:45&CodigoSeguridad=NXfBVL
-
-
email-html-1.txt