General

  • Target

    IMPAXwebAccess_9B45-FE8C-964F-DA4A_AccessCode.pdf

  • Size

    1.4MB

  • MD5

    0de8d697155a462e851386bacb46c104

  • SHA1

    df8ba74bed6a2c7779ab41ac5a3d237b066da673

  • SHA256

    2f6e443b4fb1f4e4a8295f73a922bb135ebd3862c2b14d11d0e753bd4c093d2c

  • SHA512

    518a9271520d7efb7efcf4402f37d3d0e6eebb3acfc792c982ad97157e6295477699e8ea3a66cfe1b9854136c199a90aca092abaccecc4b8ef258ada53144f24

  • SSDEEP

    12288:YDvEhfJBhru31WKHBXPuAt5uHeWkE+ftR9fTwm:YD8hfw3LHsACjkERm

Score
4/10

Malware Config

Signatures

  • PDF has QR code that contains a HTTP URL

    PDFs with URL QR codes are often used for phishing

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • IMPAXwebAccess_9B45-FE8C-964F-DA4A_AccessCode.pdf
    .pdf
    • https://bilder.rni-rotkreuz.ch

    • https://bilder.rni-rotkreuz.ch/?access_code=9B45-FE8C-964F-DA4A

    • https://bilder.rni-rotkreuz.ch?access_code=9B45-FE8C-964F-DA4A