General
-
Target
Bloom & Freeling PA_SKM_C590368369060_417161.html.pdf
-
Size
76KB
-
MD5
d8a57a64c30710ba5a1e79d860b0196a
-
SHA1
2a08762a3655a9c5402869a711035794549d92d3
-
SHA256
e3d90bc6c3364ae3a7b8c746470ae79d4449fd3a7076ea6cdc7dade4d6b68338
-
SHA512
b8aca95118411a5fe00ee399461980ff4b638bca7863cebd34f9a12f73e1b964f64285a221ec0bd58819af88683c1d74fe674a8d5752e07565898b398b22d53d
-
SSDEEP
1536:VT5qGh3gfZmb1kQbv5bvWUh24v5I7J6ElEJJzwopynK8i76+:B5qGhQfZKHbhbugBm96/Bs7i7X
Malware Config
Signatures
-
HTTP links in PDF interactive object 1 IoCs
Detects HTTP links in interactive objects within PDF files.
-
One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
Files
-
Bloom & Freeling PA_SKM_C590368369060_417161.html.pdf
-
http://bloom-freeling.com
-
http://docusign.com
-
https://n%61m12%2es%61f%65l%69nks%2epr%6ft%65ct%69%6fn%2e%6f%75tl%6f%6fk%2ecom/?url=https%3A%2F%2F%61m%65c%69nc%2e%75s17%2el%69st-m%61n%61g%65%2ecom%2Ftrack%2Fclick%3Fu%3D246420aead882c80e640b6210%26id%3D469093d995%26e%3Dd086dcd4da&data=05%7C02%7Cmfontana%40l%65r%6fyh%61yn%65s%2eorg%7C3f361b235f384a8cbfb008dc94597c31%7C3adfcb57cc2d4a31b5d180a354c0ae60%7C0%7C0%7C638548359271435897%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&sdata=5aZZQpZa22CT%2BoURIQN%2BHQ7OAguh1YrFQ6A8vpuNrz8%3D&reserved=0##BASE64_MAIL#
-