Overview

overview

4

Static

static

4

REMITTANCE...ew.pdf

windows7-x64

1

REMITTANCE...ew.pdf

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    External You Received A New Payment Receipt Re_943858779.eml

  • Size

    52KB

  • MD5

    f5d2a3f5e0f6cf5e6cd4d56d071bb6a7

  • SHA1

    5adff016de7aa19dee5ad8658568838980468bb2

  • SHA256

    b02212c346b49003f457d70b6ae642a05900701d4a40cce4a631a97d99c65c14

  • SHA512

    e63fa15230c00d47f40b9b5e9b0cd943394bbc86fefe5e16e01e07e25b1550c48a66e531986745e3e17e1eb87db105c9782ee3383b8a21daa88d16605e93ca34

  • SSDEEP

    1536:pCU93UaH7tcHt97YVkg61iSQQQ7VZVJ7GR:pCM3UaHGHg+NiFVQR

Score
4/10
pdflinkqr

Malware Config

Signatures

  • PDF has QR code that contains a HTTP URL

    PDFs with URL QR codes are often used for phishing

    pdfqr
  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

    pdflink

Files

  • External You Received A New Payment Receipt Re_943858779.eml
    .eml

    • https://aka.ms/LearnAboutSenderIdentification

  • REMITTANCE 70-For-Smith-Nephew.pdf
    .pdf

    • https://[email protected]/access/auth/wdvo1dnrfwxwcbgnd/c3VtZWRoYS5hbmFuZEBzbWl0aC1uZXBoZXcuY29t

  • email-html-2.txt
    .html
  • email-plain-1.txt