Overview

overview

4

Static

static

4

Revision.pdf

windows7-x64

1

Revision.pdf

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Revision.pdf

  • Size

    62KB

  • MD5

    c0965e91dc1e2813583b625cf7d55266

  • SHA1

    e40886e349abf7fd70354cc4d17af9a253f04061

  • SHA256

    20f936b45923475173c37423c592a7bae00bfebdb35b1ca0c3279c43906d6b1b

  • SHA512

    9d2cc3503e4e1920095bd0f08172df5a64552d2c68ea712afb49c84ba8626bd84e90d3535aca4a4c241a8f476ed222363956f47511e9ca42e7e6f6db18c81194

  • SSDEEP

    1536:0unJIxnKHu4sMtUEny20BXYgmCl35q+cqqep:PJIoHu4s+UcN0BXmCl7cqz

Score
4/10
pdflinkqr

Malware Config

Signatures

  • PDF has QR code that contains a HTTP URL

    PDFs with URL QR codes are often used for phishing

    pdfqr
  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

    pdflink

Files

  • Revision.pdf
    .pdf

    • http://Suissemeiertobler.ch

    • http://meiertobler.ch

    • https://service.meiertobler.ch/mRic-app/app-booking?t=nPjzQKWS&locale=fr-CH

    • https://service.meiertobler.ch/rvEn

    • https://service.meiertobler.ch/rvVia