General

  • Target

    16cc6ca3-3650-b4e8-5c32-4a295cc4c7a0.eml

  • Size

    134KB

  • MD5

    2eeee4e6ebbe6c975a98fc580c44706a

  • SHA1

    13e677d80e0e0bba46e53e911f0e76d571e02671

  • SHA256

    70aa208b2e3a87f39ffb9299df285dbfcf06efbf8675f7987205c099a0712c71

  • SHA512

    0032f0025e555087247603d1d42dc9db64da41886a13763a4e80ac75e03f396a4edd4e763de3cf23da39a16919a6397e35f5a218c855461f109a01747ba7a702

  • SSDEEP

    3072:0w4WjE8aGdkphUa4q/6DQuepjByCywIwossJq5yNYz://Y8Rd0hUa76DyjrywIwossJqR

Score
4/10

Malware Config

Signatures

  • PDF has QR code that contains a HTTP URL

    PDFs with URL QR codes are often used for phishing

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • 16cc6ca3-3650-b4e8-5c32-4a295cc4c7a0.eml
    .eml
  • Complete with Docusign [email protected]
    .pdf
    • https://community.docusign.com/signing-7

    • https://i8txzhhbb.cc.rs6.net/tn.jsp?f=001XSvi57gLZeOOVHCQQ9557uIV8WK2ITXAGipK9Fu-N7RZZvB7lPZ_ShKddRNNEZtm9LBrVJMKc9JGUy4F2zAFm8Vj6xIaIlo9r2aQZKYSKPTUL5cPDjKwvRuoER5jpaoXuJWyq0aa6SuozbjroHyj_vdJJEo_ojUEfuKYky5wFKc=&c=&ch==&__=/[email protected]

    • https://protect.docusign.net/report-abuse?e=AUtomjpFak9GlbPL0zFFi138DQ5sHhGKT0Yhgt62kFT9wxcaHF-gBx7W3OPyzdxSybRhrS7Q26U_lOYrEsp7iXQC5QVxNz6D0Vj6Mo4csmKYgsYkUMytHohLC_JqTtmepAxJnozrWmZE1ZiQi-SBrfvaFtXweKB343FwSi96wzLN4boMgYs-JYZQOZQut6F1JMl5PcDNYzIG7V6wAJ9cVp1t42m5JJ8QwdcCEbK9J3SvxjNrFyNqTkTpk8YZqTY9gXil1-wA-QW1oBaeNyRV2bhSl3vItGSNp9WKFe3OcAIi4B45VJ6LThjdR0eBzWqMGREZpOWMIIKGdgWDCHHnxpdMDlqu2JzrIyi0wXcpUBnRfWoYLhsJTav3lujsqsnAWGDKM_yAcrjYGj71EyOCq4nW-cyRkJp-WLIsC12Sb5szFZUyoAAhUmwymsBschK13cV71hQKwKp_pXiNVizKa1k&lang=en

    • https://support.docusign.com/

    • https://support.docusign.com/en/articles/How-do-I-manage-my-email-notifications

    • https://support.docusign.com/en/guides/Declining-to-sign-DocuSign-Signer-Guide

    • https://support.docusign.com/s/articles/How-do-I-sign-a-DocuSign-document-Basic-Signing?language=en_US&utm_campaign=GBL_XX_DBU_UPS_2211_SignNotificationEmailFooter&utm_medium=product&utm_source=postsend

    • https://www.docusign.com/features-and-benefits/mobile?utm_campaign=GBL_XX_DBU_UPS_2211_SignNotificationEmailFooter&utm_medium=product&utm_source=postsend

  • QUMWRGFQKCZKIIIS.png
    .jpg
  • email-html-2.txt
    .html
  • email-plain-1.txt