General

  • Target

    Rsgroup accountingteams___fdp.pdf

  • Size

    77KB

  • MD5

    7ade94a2cee72f1ed140f435ea2c8a6b

  • SHA1

    96d102a356d8e4887f085bbcb4af4c735a382fa5

  • SHA256

    e5290075a989c761f2b4d9dd80025c9896bf0cf6220ca2b732c7287f1d4bfc3d

  • SHA512

    2671b0b04b3b92bbc7cca2966e3d06886434cd253f11bc3b62338ece3d729e21425953787456ea0e6bccd28c20609ecd322e6cf2fc9297331e753bd2b623fd26

  • SSDEEP

    1536:MtL30HVk4YsCeS5TRjijcAx0FQuPuK7nKqWI6j//5l4WgDglWYKVAaR8WEU4xVH:I0i4vCD5djizydPuKD78jnPvPKVA2j4H

Score
4/10

Malware Config

Signatures

  • PDF has QR code that contains a HTTP URL

    PDFs with URL QR codes are often used for phishing

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • Rsgroup accountingteams___fdp.pdf
    .pdf
    • https://aspernatur.cfd/m/?c3Y9bzM2NV8xX25vbSZyYW5kPWVXNU5jM1ZaUldGNU4zaDFZVXBUTm1KdU5FZz0mdWlkPVVTRVIzMTA1MjAyNFVOSVFVRTAyNTYwNTMxMDQyMDI0MjAyNDA1MzE1NjAyMDQ=N0123Nwilliam.brummett@rsgroup.com