General

  • Target

    WASLA183865_FBW151214A52.pdf

  • Size

    82KB

  • MD5

    8076754ca81b23674da7226914546608

  • SHA1

    4da0102fc02f0cdf608d9e25b31dec6b2d768744

  • SHA256

    c6cdc594b996e07a1e68d5390f3a9bd92ea50f1056780e7c606731160ad6084a

  • SHA512

    a1ca8d6857ea0a5b478c9162c5a9558d8911a6ae4e34b79195a1355dd726443ce5b80a528074df41b95a1900fb13f5ead44edcfea71551b694fa451ccfcc467a

  • SSDEEP

    1536:uJbmuewA0Z9PsitbXlbSMv1nJvBkGMXVlZCzt08pPTzDpZQZkcm:AmwAk9Ui1XlbSo1JviGMllbGyVm

Score
4/10

Malware Config

Signatures

  • PDF has QR code that contains a HTTP URL

    PDFs with URL QR codes are often used for phishing

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • WASLA183865_FBW151214A52.pdf
    .pdf
    • https://verificacfdi.facturaelectronica.sat.gob.mx/default.aspx?id=B816F715-4B1B-43CA-818D-586659D27898&re=FBW151214A52&rr=GNO130226DE9&tt=411.0&fe=4aeM6A==