Overview

overview

4

Static

static

4

Bonus Lett...40.pdf

windows7-x64

1

Bonus Lett...40.pdf

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    Bonus Letter for Rges Finance_DocuSign_5540.pdf

  • Size

    39KB

  • MD5

    e13e1da3e28f3ce21858056b7d2bc62c

  • SHA1

    a71d1a31e2ee12c678f52082a3aea4975b2f1c9d

  • SHA256

    99487139cb2460b99097f56a12dee54b4cf2eb8f55fdea3130dafe9018397919

  • SHA512

    472fff556b6b55ad925dcde2d90fee6a79c5f3411ad81982805e138877a33d6e8b8a9f0cc7f9f0c5a887073223150a9f454d538ce69ee9af60dd42f64a7b49e7

  • SSDEEP

    768:u7ncTiq3Qd/vL4uUj39zzOzY2c9BUsqzKzXofs2tfZ:urKhQd/zQBzzOMj9OspofltfZ

Score
4/10
pdflinkqr

Malware Config

Signatures

  • PDF has QR code that contains a HTTP URL

    PDFs with URL QR codes are often used for phishing

    pdfqr
  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

    pdflink

Files

  • Bonus Letter for Rges Finance_DocuSign_5540.pdf
    .pdf

    • https://ZTd.unificen.com/ZTd/#[email protected]

    • https://support.docusign.com/en/articles/How-do-I-manage-my-email-notifications

    • https://support.docusign.com/en/guides/Declining-to-sign-DocuSign-Signer-Guide

    • https://support.docusign.com/s/articles/How-do-I-sign-a-DocuSign-document-Basic-Signing?language=en_US&utm_campaign=GBL_XX_DBU_UPS_2211_SignNotificationEmailFooter&utm_medium=product&utm_source=postsend

    • https://www.docusign.com/features-and-benefits/mobile?utm_campaign=GBL_XX_DBU_UPS_2211_SignNotificationEmailFooter&utm_medium=product&utm_source=postsend

    • https://www.docusign.com/support