Overview

overview

4

Static

static

4

41c68f3746...87.pdf

windows7-x64

1

41c68f3746...87.pdf

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    41c68f37467144d55e517ee35ab17387.bin
  • Size 69KB
  • Sample240630-b9m6vssapd
  • SHA256 6b0e3b667f9762d12783487c318f4b84f237c98c016c947e801d0bb11700ce81
  • MD5 SHA1 SHA512 SSDEEP
Score
4/10
pdflinkqr

Malware Config

Signatures

  • PDF has QR code that contains a HTTP URL

    PDFs with URL QR codes are often used for phishing

    pdfqr
  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

    pdflink

File Explorer

  • 41c68f37467144d55e517ee35ab17387.bin
    .pdf 69KB

41c68f37467144d55e517ee35ab17387.bin

  • SHA256 6b0e3b667f9762d12783487c318f4b84f237c98c016c947e801d0bb11700ce81
  • MD5 SHA1 SHA512 SSDEEP

Extracted URLs

  • qr https://​api-internal​.weblinkconnect.com/api/Communication/Communication/1148248/click?url=https://bolsasroyal.com/zgvwex%23Parag%2Bthericksgroup.com&x-tenant=WinterHavenFLCOC