General
-
Target
Translink® Confidential Files#637135(Revised) for Caitlin..eml
-
Size
116KB
-
MD5
4c54d0d9076dcb18657b656234939a61
-
SHA1
d13ba71f49c889f2dab5ef932bdb730fb87ac28e
-
SHA256
33a24d513f10d0abf80c6784d409f6b4dd7ab34f51bac2a0fd8d920d2132a5d6
-
SHA512
dee443bd712359122f357b9665ff99d51c3ace0505c7b45293d39bea617fadf8616ddc18a106de7ec165b15c646e301707d2bd49510f21fcd2d20ce4020ebc66
-
SSDEEP
3072:BRnVG3U9uT5VvICqhJIeIORDcDnygFD7q:DVuTvIjJIe/RunDFD7q
Score
4/10
Malware Config
Signatures
-
PDF has QR code that contains a HTTP URL
PDFs with URL QR codes are often used for phishing
-
One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
Files
-
Translink® Confidential Files#637135(Revised) for Caitlin..eml
Password: infected
-
TransLink BC Disclosures and Signatures Consent Docs.pdf
Password: infected
-
https://lakelandspartans.sa.com/oC2hQyd3UM/.d7g/VrOn4THx2a/Y2FpdGxpbi5jb29wZXJAdHJhbnNsaW5rLmNh
-
-
email-html-2.txt
-
email-plain-1.txt