General
-
Target
Encrypted Doc-[HTb-8157365].pdf
-
Size
69KB
-
MD5
41c68f37467144d55e517ee35ab17387
-
SHA1
0adbff49597b0e852f6dd15fa48f60d870f76e93
-
SHA256
6b0e3b667f9762d12783487c318f4b84f237c98c016c947e801d0bb11700ce81
-
SHA512
c467370482e2fe0270bd4115bcbeacaf1ddf137d074d986d2203750e56a0a954e5d2c0ceedc56a06ada0c44589dcde75f4451a9c0cbca08eb8894d784a9981b6
-
SSDEEP
768:yMSjGCpfPkuAyTV0x4qGMuSO88NN1cK5xpQGNBegYZLzPuEju2ivZiREg/7lj+3d:wR5VTCNY1cfGDyLzsEuTjVvFyyuXImhC
Score
4/10
Malware Config
Signatures
-
PDF has QR code that contains a HTTP URL
PDFs with URL QR codes are often used for phishing
-
One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
Files
-
Encrypted Doc-[HTb-8157365].pdf
-
https://api-internal.weblinkconnect.com/api/Communication/Communication/1148248/click?url=https://bolsasroyal.com/zgvwex%23Parag%2Bthericksgroup.com&x-tenant=WinterHavenFLCOC
-