General

  • Target

    syncmail.pdf

  • Size

    62KB

  • MD5

    0d6c5a392fd50352f0f9cf6ff2a4ed19

  • SHA1

    e0d0bfd68ae5319ad9c066d889aca1dd54060aaa

  • SHA256

    6797e3b32d1a3e032a036625b449c73061d1cc4cc94dafcfb0ba968a881f5d1b

  • SHA512

    7d899227b2102f56716d4a46b071ac9c9c9ba6f99e108cb287c3e44fc163a2fd0c892732bd48a15e43e00c930cec7a6de0846e7c1cafd03c8ffc641c32bf161d

  • SSDEEP

    1536:aLhLF8O+BpArOsqBN4+bNlI+9ymCaZjqLEK71dkhW1ps6BSWriU:+hCcnqlC3aZ2EK7HkWp1diU

Score
4/10

Malware Config

Signatures

  • PDF has QR code that contains a HTTP URL

    PDFs with URL QR codes are often used for phishing

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • syncmail.pdf
    .pdf

    Password: 123456