Overview

overview

4

Static

static

4

Foresightg...nt.pdf

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    Foresightgroup-Settlement.pdf.crdownload

  • Size

    55KB

  • MD5

    127accc9da68f1a805df1efbe0b6811e

  • SHA1

    acbfd66ce44c789e93626d06b7fe5d16c4717ae0

  • SHA256

    37d50a229a91d3f1dc3cb5376dab10a9801054acac8cfece9f453d7b1e0922cf

  • SHA512

    6b5b72918aefe614af4ccb2ba8f045d8088faf30ab2f4cfa036b417a6ce5957257b7fadcf6dc34005e56f3aa268f6bb1831cdc81b94f5ffcb7232e4b5275c572

  • SSDEEP

    1536:VlYOHcle6lKkc7z7NcH0S42J93vK5CkZTb:sOHSI7MRvK/Zf

Score
4/10
pdflinkqr

Malware Config

Signatures

  • PDF has QR code that contains a HTTP URL

    PDFs with URL QR codes are often used for phishing

    pdfqr
  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

    pdflink

Files

  • Foresightgroup-Settlement.pdf.crdownload
    .pdf

    Password: infected

    • http://Security.cloud

    • http://www.symanteccloud.com

    • https://​fidellybsg​.com/10.html#ZWtha291bGxpQGZvcmVzaWdodGdyb3VwLmV1