Overview

overview

6

Static

static

6

TBAI-DFA_2...27.pdf

windows10-2004-x64

1

Resubmissions

05/07/2024, 11:12

240705-naxx8sxcnl 6

05/07/2024, 11:08

240705-m81akszcmf 6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    TBAI-DFA_2024 facturas-92-20240627.pdf

  • Size

    430KB

  • MD5

    1a2d1484fa7111dab87356fe101e57bd

  • SHA1

    dc18fed93f359dc617622a8e9a403a0bbe6c9cbf

  • SHA256

    c0199036d9fa964f4aac035ebc2f6854c4e23eae6cad5aba25124db2073f3c63

  • SHA512

    91e7bda2e1648ae639512227d786aff31f62177b642e2a6e7ac0f906bbcb9c8716e788d19ef99ad54676b97b57ae1eb5a684efd6e4ee0f4b70629f3de9ce51a5

  • SSDEEP

    12288:qVgEjBDrA4XZ/SsFsozsF0PYc0UYG3kmMUFMp:md84J2oG+6xG3kmMUep

Score
6/10
pdflinkjavascriptqr

Malware Config

Signatures

  • PDF contains JavaScript

    Detects presence of JavaScript in PDF files.

    pdfjavascript
  • PDF has QR code that contains a HTTP URL

    PDFs with URL QR codes are often used for phishing

    pdfqr
  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

    pdflink

Files

  • TBAI-DFA_2024 facturas-92-20240627.pdf
    .pdf

    • https://e-s.araba.eus/wps/portal/ConsultaCove?cove=Bhe7dMb2JIMcGteN

    • https://ticketbai.araba.eus/tbai/qrtbai/?id=TBAI-B01557313-270624-roQonK%2FIxk7TJ-155&s=DFA_2024+facturas&nf=92&i=823.34&cr=179