General

  • Target

    Signature Requested_ Secure Shared Docs Via e-Sign #10 - Manulife® Executed Agreement Files #81544(REVISED)..eml

  • Size

    118KB

  • MD5

    e1c82e5a285e99306ee7b989f9298874

  • SHA1

    ac2ce7683ccebafbbd5a739386cdf81d0285ebdd

  • SHA256

    c22f6894fa43d4b8655656d90492a8d41dec9a461c26a09f890b11302831804a

  • SHA512

    d663436a47152622d060bf982be0a2d0c7e3fc7be925b9ed02da5e8957bc46c5d515e07c06fefa6aa96bd14f44899aba2c8b4d0b3c2a49819a58be033a203624

  • SSDEEP

    3072:DfpAnVG3U9uT5ViFUU5ZiHNM2eqxsgVEreJc3Fg:uVuTiF5Z+n+gVEb3Fg

Score
4/10

Malware Config

Signatures

  • PDF has QR code that contains a HTTP URL

    PDFs with URL QR codes are often used for phishing

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • Signature Requested_ Secure Shared Docs Via e-Sign #10 - Manulife® Executed Agreement Files #81544(REVISED)..eml
    .eml
  • Manulife Consent Files#304861(Revised).pdf
    .pdf
    • https://ketoorefoasilon.cloud/?cbywugxb&qrc=b2ZmaWNlb2Z0aGVjb3Jwb3JhdGVzZWNyZXRhcnlAbWFudWxpZmUuY29t

  • email-html-2.txt
  • email-plain-1.txt