Overview

overview

4

Static

static

4

Complete w...an.pdf

windows11-21h2-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    Complete with Docusign brian.pdf
  • Size 38KB
  • Sample240621-tt44js1frk
  • SHA256 b9ef5aed85b24e4079ba737f9becfa49f9962f8c03f478ec2daac9f009f31333
  • MD5 SHA1 SHA512 SSDEEP
Score
4/10
pdflinkqr

Malware Config

Signatures

  • PDF has QR code that contains a HTTP URL

    PDFs with URL QR codes are often used for phishing

    pdfqr
  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

    pdflink

File Explorer

  • Complete with Docusign brian.pdf
    .pdf 38KB

Complete with Docusign brian.pdf

  • SHA256 b9ef5aed85b24e4079ba737f9becfa49f9962f8c03f478ec2daac9f009f31333
  • MD5 SHA1 SHA512 SSDEEP

Extracted URLs

  • file https://community.docusign.com/signing-7

  • qr https://mappeks.com/?guminzbe&[email protected]

  • file https://protect.docusign.net/report-abuse?e=AUtomjpFak9GlbPL0zFFi138DQ5sHhGKT0Yhgt62kFT9wxcaHF-gBx7W3OPyzdxSybRhrS7Q26U_lOYrEsp7iXQC5QVxNz6D0Vj6Mo4csmKYgsYkUMytHohLC_JqTtmepAxJnozrWmZE1ZiQi-SBrfvaFtXweKB343FwSi96wzLN4boMgYs-JYZQOZQut6F1JMl5PcDNYzIG7V6wAJ9cVp1t42m5JJ8QwdcCEbK9J3SvxjNrFyNqTkTpk8YZqTY9gXil1-wA-QW1oBaeNyRV2bhSl3vItGSNp9WKFe3OcAIi4B45VJ6LThjdR0eBzWqMGREZpOWMIIKGdgWDCHHnxpdMDlqu2JzrIyi0wXcpUBnRfWoYLhsJTav3lujsqsnAWGDKM_yAcrjYGj71EyOCq4nW-cyRkJp-WLIsC12Sb5szFZUyoAAhUmwymsBschK13cV71hQKwKp_pXiNVizKa1k&lang=en

  • file https://support.docusign.com/

  • file https://support.docusign.com/en/articles/How-do-I-manage-my-email-notifications

  • file https://support.docusign.com/en/guides/Declining-to-sign-DocuSign-Signer-Guide

  • file https://support.docusign.com/s/articles/How-do-I-sign-a-DocuSign-document-Basic-Signing?language=en_US&utm_campaign=GBL_XX_DBU_UPS_2211_SignNotificationEmailFooter&utm_medium=product&utm_source=postsend

  • file https://www.docusign.com/features-and-benefits/mobile?utm_campaign=GBL_XX_DBU_UPS_2211_SignNotificationEmailFooter&utm_medium=product&utm_source=postsend