Overview

overview

4

Static

static

4

Encrypted ...1].pdf

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    Encrypted Doc-[LXU-4210481].pdf

  • Size

    71KB

  • MD5

    b48cf73ed32a6d5b3e6916c1215f45d6

  • SHA1

    e7432c1dd532e1780bfadedac278baeff595f030

  • SHA256

    7de210ac2fa5ea3222c12f7f10be54eaf14da8e3e4c57b2453f80b8f9c66f872

  • SHA512

    e1c90627bc4d51861c245e7a9d8f8b1110e42f7d404cd1a9edd2da8182e367f493ba49187d07b9e559370f3ce67cdab5ddd64c101c5f1c332d83205337df0b33

  • SSDEEP

    1536:wo5VTCNi1cfGDyLzSEuVjVvFSLaujFH1+0+3Z:BpCNi1cfGDoWFVhvFSbFH1+3p

Score
4/10
pdflinkqr

Malware Config

Signatures

  • PDF has QR code that contains a HTTP URL

    PDFs with URL QR codes are often used for phishing

    pdfqr
  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

    pdflink

Files

  • Encrypted Doc-[LXU-4210481].pdf
    .pdf

    • https://​api-internal​.weblinkconnect.com/api/Communication/Communication/1148248/click?url=https://bolsasroyal.com/zgvwex%23Celkins%2Bhilcorp.com&x-tenant=WinterHavenFLCOC