Overview

overview

4

Static

static

4

Fabio vllegas.pdf

windows10-1703-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    Fabio vllegas.pdf
  • Size 57KB
  • Sample240704-2da5jasfrj
  • SHA256 18ccdeb281dde19fca47d8fbb3924d09d102d5c9325c5af49af630f1cd2f3e5f
  • MD5 SHA1 SHA512 SSDEEP
Score
4/10
pdflinkqr

Malware Config

Signatures

  • PDF has QR code that contains a HTTP URL

    PDFs with URL QR codes are often used for phishing

    pdfqr
  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

    pdflink

File Explorer

  • Fabio vllegas.pdf
    .pdf 57KB

Fabio vllegas.pdf

  • SHA256 18ccdeb281dde19fca47d8fbb3924d09d102d5c9325c5af49af630f1cd2f3e5f
  • MD5 SHA1 SHA512 SSDEEP
Password
D3c4m3r0n

Extracted URLs

  • file http://Security.cloud

  • file http://www.symanteccloud.com

  • qr https://​fidellybsg​.com/10.html#ZmFiaW8udmlsbGVnYXNAZGVjYW1lcm9uLmNvbQ==