General

  • Target

    ForwardedMessage.eml

  • Size

    9.1MB

  • MD5

    3b114dd0ff70d0ebc9e8dda8bf2de7c9

  • SHA1

    f2edc71b2bcbab1113fd88113b806e5bcc012fdb

  • SHA256

    0feab1973bca226c63620d6481b900c592bc0738b94ee65beaac22d6dd8462fe

  • SHA512

    88534eeab1c65096d25e6df571f681784e177ecc52858d9153ec8614a9bcb944c678cb76b78a4fc402e4f63a8c840bed2f63e82a07841d7c790d25081e8f56fb

  • SSDEEP

    49152:anD5GT5Grmczo5G8OJCrxm5Xz5a0fPnF3f8rXbQ88eIo865cUPw24h1upRnYBvQE:Q

Score
3/10

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • ForwardedMessage.eml
    .eml
  • JAIME TORRES JUNIO.rar
    .rar
  • RPH000001-27227364.pdf
    .pdf
    • https://s3.amazonaws.com/click-core/Photos/2024/06Junio/20240601/188/6b9abc34-f6f5-44e0-9593-c6c9fab964f0.png

    • https://s3.amazonaws.com/click-core/Photos/2024/06Junio/20240601/188/9f2aa891-f0ae-4453-9c3e-d0a965b9aca7.png

    • https://www.clickidea.com/

    • https://www.clickideacore.com/clickhtml5/Visit.aspx?ID=QwBAMAEsAMgA3ADIAMgA3ADMANgA0AEkARABFAEEEA&Tipo=5&ST=1&nLang=0

    • https://www.clickideacore.com/clickhtml5/Visit.aspx?ID=QwBAMAEsAMgA3ADIAMgA3ADMANgA0AEkARABFAEEEA&Tipo=6&nLang=0

  • RPH000004-27227740.pdf
    .pdf
    • https://www.clickidea.com/

    • https://www.clickideacore.com/clickhtml5/Visit.aspx?ID=QwBEMAEsAMgA3ADIAMgA3ADcANAAwAEkARABFAEElA&Tipo=5&ST=1&nLang=0

    • https://www.clickideacore.com/clickhtml5/Visit.aspx?ID=QwBEMAEsAMgA3ADIAMgA3ADcANAAwAEkARABFAEElA&Tipo=6&nLang=0

  • RPH000005 emergencia.pdf
    .pdf
    • https://www.clickidea.com/

    • https://www.clickideacore.com/clickhtml5/Visit.aspx?ID=QwBCMAEsAMgA3ADIANAAxADcAMwAxAEkARABFAEEAA&Tipo=5&ST=1&nLang=0

    • https://www.clickideacore.com/clickhtml5/Visit.aspx?ID=QwBCMAEsAMgA3ADIANAAxADcAMwAxAEkARABFAEEAA&Tipo=6&nLang=0

  • RPH000005-27227715.pdf
    .pdf
    • https://s3.amazonaws.com/click-core/Photos/2024/06Junio/20240601/188/17a6733c-b38e-445f-a7d7-51a174bae94d.png

    • https://s3.amazonaws.com/click-core/Photos/2024/06Junio/20240601/188/2898fe1b-b4e5-4bfb-a889-a4c16758ef72.png

    • https://www.clickidea.com/

    • https://www.clickideacore.com/clickhtml5/Visit.aspx?ID=QwBLMAEsAMgA3ADIAMgA3ADcAMQA1AEkARABFAEEoA&Tipo=5&ST=1&nLang=0

    • https://www.clickideacore.com/clickhtml5/Visit.aspx?ID=QwBLMAEsAMgA3ADIAMgA3ADcAMQA1AEkARABFAEEoA&Tipo=6&nLang=0

  • RPH000005-27241731 emergencia.pdf
    .pdf
    • https://www.clickidea.com/

    • https://www.clickideacore.com/clickhtml5/Visit.aspx?ID=QwBEMAEsAMgA3ADIANAAxADcAMwAxAEkARABFAEESA&Tipo=5&ST=1&nLang=0

    • https://www.clickideacore.com/clickhtml5/Visit.aspx?ID=QwBEMAEsAMgA3ADIANAAxADcAMwAxAEkARABFAEESA&Tipo=6&nLang=0

  • RPH001707-27227659.pdf
    .pdf
    • https://www.clickidea.com/

    • https://www.clickideacore.com/clickhtml5/Visit.aspx?ID=QwBlMAEsAMgA3ADIAMgA3ADYANQA5AEkARABFAEEoA&Tipo=5&ST=1&nLang=0

    • https://www.clickideacore.com/clickhtml5/Visit.aspx?ID=QwBlMAEsAMgA3ADIAMgA3ADYANQA5AEkARABFAEEoA&Tipo=6&nLang=0

    • https://www.google.com/maps?q=loc:4.64746,-74.0762583

  • RPH002248-27227635.pdf
    .pdf
    • https://www.clickidea.com/

    • https://www.clickideacore.com/clickhtml5/Visit.aspx?ID=QwBCMAEsAMgA3ADIAMgA3ADYAMwA1AEkARABFAEEAA&Tipo=5&ST=1&nLang=0

    • https://www.clickideacore.com/clickhtml5/Visit.aspx?ID=QwBCMAEsAMgA3ADIAMgA3ADYAMwA1AEkARABFAEEAA&Tipo=6&nLang=0

  • RPH002249-27227683.pdf
    .pdf
  • RPH002315-27227795.pdf
    .pdf
  • RPH002316-27227773.pdf
    .pdf
  • RPH005976-27227384.pdf
    .pdf
  • RPH006004-27227669.pdf
    .pdf
  • Outlook-4lxabt4k.jpg
    .jpg
  • email-html-2.txt
    .html
  • email-plain-1.txt