General

  • Target

    Complete with Docusign [email protected]

  • Size

    43KB

  • MD5

    c697193dba2f7d2ed6459a94a0fb77b1

  • SHA1

    8265cc86eafaf2725ac08c90b8127f61985fd761

  • SHA256

    fbf695d71731f33e7231709829f77a13fa490bc18c574e7fd1183480ee685b39

  • SHA512

    8307b34a5e0f7c0c01a9aa0815f95dca216968160316d454f796eab56a5d45f01faa9f0dad95ed965c90a0318b01c7e8def982c52cd596e9b58c0230a0d57dfb

  • SSDEEP

    768:KSyIl3RdfcQH+Wq3pU0hS4zNRhOYWmgzN1lLgu5IyQ1pvt8:KM9fcWq3ps6RPAgu5BQfvt8

Score
4/10

Malware Config

Signatures

  • PDF has QR code that contains a HTTP URL

    PDFs with URL QR codes are often used for phishing

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • Complete with Docusign [email protected]
    .pdf
    • https://DETk.hediatat.com/EcjECo/#[email protected]

    • https://community.docusign.com/signing-7

    • https://protect.docusign.net/report-abuse?e=AUtomjpFak9GlbPL0zFFi138DQ5sHhGKT0Yhgt62kFT9wxcaHF-gBx7W3OPyzdxSybRhrS7Q26U_lOYrEsp7iXQC5QVxNz6D0Vj6Mo4csmKYgsYkUMytHohLC_JqTtmepAxJnozrWmZE1ZiQi-SBrfvaFtXweKB343FwSi96wzLN4boMgYs-JYZQOZQut6F1JMl5PcDNYzIG7V6wAJ9cVp1t42m5JJ8QwdcCEbK9J3SvxjNrFyNqTkTpk8YZqTY9gXil1-wA-QW1oBaeNyRV2bhSl3vItGSNp9WKFe3OcAIi4B45VJ6LThjdR0eBzWqMGREZpOWMIIKGdgWDCHHnxpdMDlqu2JzrIyi0wXcpUBnRfWoYLhsJTav3lujsqsnAWGDKM_yAcrjYGj71EyOCq4nW-cyRkJp-WLIsC12Sb5szFZUyoAAhUmwymsBschK13cV71hQKwKp_pXiNVizKa1k&lang=en

    • https://support.docusign.com/

    • https://support.docusign.com/en/articles/How-do-I-manage-my-email-notifications

    • https://support.docusign.com/en/guides/Declining-to-sign-DocuSign-Signer-Guide

    • https://support.docusign.com/s/articles/How-do-I-sign-a-DocuSign-document-Basic-Signing?language=en_US&utm_campaign=GBL_XX_DBU_UPS_2211_SignNotificationEmailFooter&utm_medium=product&utm_source=postsend

    • https://www.docusign.com/features-and-benefits/mobile?utm_campaign=GBL_XX_DBU_UPS_2211_SignNotificationEmailFooter&utm_medium=product&utm_source=postsend