General

  • Target

    Rechnung- 15042067.PDF

  • Size

    1.4MB

  • MD5

    ab758e558db4d3dccdeba54fb2f8f961

  • SHA1

    663e4be0a2f2113b8fab3f60a85064d53ba95c4b

  • SHA256

    ebc9b924d64099f80105400af3798a08f5ca80c93690930424aa2b93e8bf5473

  • SHA512

    fb0cd13f426b6b5a8cf36e182f27a8eabfd6f96076baeb44930e517ba1e2169aa4cc550357ed9f74849e229dfa7378e14c6287122c29ad263a5a1da034ee784e

  • SSDEEP

    24576:T017I6Uym3DKuxdMkqhhC45dIxO3Yemz8/KwTbPFTY4Fgt6XYGL:T0173p+KQV3O3Yemz8iwPFHk1G

Score
4/10

Malware Config

Signatures

  • PDF has QR code that contains a HTTP URL

    PDFs with URL QR codes are often used for phishing

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • Rechnung- 15042067.PDF
    .pdf
    • https://www.thwilly.ch/adressmutation