Overview

overview

4

Static

static

4

closing.pdf

windows7-x64

1

closing.pdf

windows10-2004-x64

1

Resubmissions

12/06/2024, 02:19

240612-cr862syeph 4

12/06/2024, 02:16

240612-cqk3tsyenb 4

Sharing

Copy URL Twitter E-mail

General

  • Target

    closing.pdf

  • Size

    85KB

  • MD5

    8cb769d0ca992cece3a1a5ec223b3fef

  • SHA1

    aa75baf172eabedbe28c422f40de5b63403050ea

  • SHA256

    b2c6191a866d430e1fe03cfd8400416a2bd29fd612a6fb3356a6374318d0b246

  • SHA512

    68012e34995c855f38018f6fc66c2fbd68bdf2cc7a342d3dddd20e0dc3c2d9ea121e27435d0a3c792c07dc498c7296f3483dd2d7dc0b2cdbbe9ccb9a7731e16f

  • SSDEEP

    1536:TmQNEflQU3AgLhhrm+KDokCNyy42+3AcsWXPzVOGfQFptWSSNB/8rQ8CmJxfhfCk:affOUQAhhraokCNyT9s0PsGfQdg58rQQ

Score
4/10
pdflinkqr

Malware Config

Signatures

  • PDF has QR code that contains a HTTP URL

    PDFs with URL QR codes are often used for phishing

    pdfqr
  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

    pdflink

Files

  • closing.pdf
    .pdf

    Password: 123456

    • https://wFm.tichodrome4.ru/wFm/#Y21hcnRpbmV6QG1naS10ZWNoLmNvbQ==