General
-
Target
attachment(4).eml
-
Size
341KB
-
MD5
6dbf69d313903d65fcd1751be6a99c43
-
SHA1
44b1d2888588d276b4c59aaf569522d6d6ffe581
-
SHA256
5da421457ce57b124a1727f2ee9ef1d95e6a046cb9c5635b8c782d3821a569b9
-
SHA512
703ce40377806f3a7ba1d1c7d57a200a64622a0a37c86ebe1c78e98e2982cd1d5c472a802d12fd6d6a046719d3ae186b7c12d9d74d75c6b9d49a76625c5b2df1
-
SSDEEP
6144:RKmo754impPN0HfU8aPgJ2MPz0zg3OTbgkxj+byynblwZkvzrFHosfzf:RKmotv2PSHfII2MYptjlwDLrFHT
Malware Config
Signatures
-
HTTP links in PDF interactive object 1 IoCs
Detects HTTP links in interactive objects within PDF files.
resource yara_rule static1/unpack001/Pelds Design Services #24-052-213867.pdf pdf_with_link_action
Files
-
attachment(4).eml.eml
-
Pelds Design Services #24-052-213867.pdf.pdf
-
https://forms.office.com/Pages/ResponsePage.aspx?id=hoEAOIlS6kCAFt8H1S5okHPZeqjO7nlPhvuIGT-fcOlUME5SMzFYSU9PS0FOSDZRWDREVE5RRjVZVy4u
-
-
email-html-2.txt.html
-
email-plain-1.txt
-
image001.png.png