General
-
Target
New Insurance Plan for Theresa Penney.pdf
-
Size
33KB
-
MD5
3893dc2526eec4843c7d9aa59d651a4c
-
SHA1
6c13caa6067b781d46f1c7bf4d7edf5c031029b9
-
SHA256
8506e1a401dc9980d564272348de2c0b66dc1af82df2f16077837f945dc77cdc
-
SHA512
e8db08285fa8dc9d455ea171abf0215b1bc488b80dc616954360a457dd0495e002c8901be99841ffdf6e2e5046d97e8debb9ef409017a904ce19549298fb76d3
-
SSDEEP
768:Ws97XUpMIiDM/O/QNWmWCnh5A7PmEHC8WRKr0SctIq4+Y:W+XUN/OYNWmhnbMmE3WgQSEIgY
Malware Config
Signatures
-
PDF has QR code that contains a HTTP URL
PDFs with URL QR codes are often used for phishing
-
One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
Files
-
New Insurance Plan for Theresa Penney.pdf
-
https://link.mail.beehiiv.com/ls/click?upn=u001.V0QxflP9EQpM7ua3HbjvayDpMr0NKHcnqX9fY89QcEUo65n7lO1FhonIHpqsVSGxnDHvnjnEc3iMJNpPyMI6T5zVncHj-2BWKqJb-2FYONUn4XWeqC4RDQus7T6WtbBPeEM-2FpAcKnEulugu5YmKQ4svq7yyBICek01m-2BfXin5DCsbOo-3DgeL3_QAlDIX-2FM8zFZ9laCfvHFJLYgkmBIdiEirocpX6rAkEmS1wWgE0hWG6gE-2Bj3ksrtgiZZLRMbk8UrsvojQM1BCyPNWFagx6ZsX8FoGh6yb-2BepT-2FG0vl4NO4uuIHXBCAgF6jY8UwzEMXYaIEf-2BhwTK-2FvS-2F52eZjW5sajTBX3T9D13zKT-2FLehNJQobF3mPlrRYrDHGVA7czphhv-2BRgnUdAPFiE9hJOn446PaZkPoXN9gN-2BJmu60NhMVjICvwVVa3agRa7Q9BQ-2Fj0wBxvmwLpbNY2KC5jMtxwd7erCQW7-2Bu9tXzF-2BRtPnD6XnB47SNd7hZjtbPTia-2BaeQC2yoa3zhBOTm00b-2BX1bMJ0S2Cnisl-2FRSveJ3KRLmDi6VI-2FVVB44-2FV6tlhAW1HhGjnaB-2BEDtNIb8yiRU8e7nI8xs-2F972NWB-2FLkzFd68gLYaTovXlD8-2Bs5SaVk
-