General
-
Target
Sprechstundenbericht_02.05.2024_Gefässteam_Bern__Thomas_Boss_3656.PDF
-
Size
280KB
-
MD5
b59a7ab3122d0211e99a04bd6a724b9b
-
SHA1
306bad070969384a9b505a0793ac08c0bba83ba5
-
SHA256
f45c63cc3e08d86307598340a1405d1c8bda8c830fe17ddfda9b77bc9db7f6c2
-
SHA512
e176cb14a7eaf6cef580a94dd1d5de2333cc1736e3c9d760a3d3cdb45c3ba627e4c1ffe521bb8ad14832dd21cc8f2e680305a15e27d35b0fa91d301e83f68ac4
-
SSDEEP
6144:5B4ofU3nua++6Ph04+KKeXutfsiUcxSxD7j2BqUNJ4JuJNHKRzvXNUUfYAnXY:z4ofU8+6p0getfsxcxu7qB9v4UbObXN6
Score
4/10
Malware Config
Signatures
-
PDF has QR code that contains a HTTP URL
PDFs with URL QR codes are often used for phishing
-
One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
Files
-
Sprechstundenbericht_02.05.2024_Gefässteam_Bern__Thomas_Boss_3656.PDF
-
http://gefaessteam-bern.ch
-
http://hin.ch
-
http://lindenhofgruppe.ch
-
http://www.gefaessteam-bern.ch
-