phish_alert_sp2_2[.]0[.]0[.]0 (7)[.]eml | Triage

Sharing

General

Target

phish_alert_sp2_2.0.0.0 (7).eml
Size

53KB
MD5

ef992455146fe4b5c4a35844d06ffd42
SHA1

d7d4791d873b9ee3dd794d97ac3a4700d6e1c4e3
SHA256

4b07c6ffa088563c8849475a55194674762b500fea8d85cedc50b3a3325b1142
SHA512

17831456966057df24a3b6f5e285eed9f410dcc93d17634cf966ded2c03634bead6726c2c94d6e70e1e907e6ee6703990fcb271f193f7f141a7e221260c147f0
SSDEEP

1536:3bSk4VKgrgBf5gD2YMDmrCZdUT4b9t72BtWoPC:3bSk4VKpB2qXmrCnYtG

Score

4^/10

pdf link

Malware Config

Signatures

HTTP links in PDF interactive object 1 IoCs

Detects HTTP links in interactive objects within PDF files.

resource	yara_rule
static1/unpack001/Corporation Service Company - Service Agreement_data.pdf	pdf_with_link_action

One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
pdf link

Files

phish_alert_sp2_2.0.0.0 (7).eml
.eml
Corporation Service Company - Service Agreement_data.pdf
.pdf
- http://cscglobal.com
- https://r%75p%2es%6f%75nd%65stl%69nk%2ecom/ce/c/667d9700e4a8d2d22ebec92d/667d97b53944da33cb38a6ed/667d97cf33a4559fac657fef?signature=b4046afb4f5b89dc34e18e79dff1ebc0c2ffb7310b612658af0b1ac967a76b54#/?/YmVuLmZvc3RlckBjc2NnbG9iYWwuY29t
email-html-1.txt
.html