Overview

overview

4

Static

static

4

Bonus Lett...56.pdf

windows7-x64

1

Bonus Lett...56.pdf

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    Bonus Letter for Skeisg Finance_DocuSign_7656.pdf

  • Size

    41KB

  • MD5

    f1c07f425c1bd70749cfc5c519629044

  • SHA1

    317bee8376c5a0934494e2e8eba6e2eecae454a3

  • SHA256

    cd126c5b247f4ab6cad0949dcd987e85e59cbd08d5d7fef82516b10492e9f7f0

  • SHA512

    398a0a4973b56875c74e4b8c95933ad03495a5a5b78f62ef4237f53cff58b896bb2a8508aee19f498cf21e98cf569dbc40a45539d18e45169ff22a8bf7fc44b2

  • SSDEEP

    768:z++w7w8q4LLWNfgu9zzSitSvABlGQhe7gmF5i+QhRUo:zS7w8q4LLWRgEzzSitSoBIQony+Q/Uo

Score
4/10
pdflinkqr

Malware Config

Signatures

  • PDF has QR code that contains a HTTP URL

    PDFs with URL QR codes are often used for phishing

    pdfqr
  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

    pdflink

Files

  • Bonus Letter for Skeisg Finance_DocuSign_7656.pdf
    .pdf

    • https://ZTd.unificen.com/ZTd/#[email protected]

    • https://support.docusign.com/en/articles/How-do-I-manage-my-email-notifications

    • https://support.docusign.com/en/guides/Declining-to-sign-DocuSign-Signer-Guide

    • https://support.docusign.com/s/articles/How-do-I-sign-a-DocuSign-document-Basic-Signing?language=en_US&utm_campaign=GBL_XX_DBU_UPS_2211_SignNotificationEmailFooter&utm_medium=product&utm_source=postsend

    • https://www.docusign.com/features-and-benefits/mobile?utm_campaign=GBL_XX_DBU_UPS_2211_SignNotificationEmailFooter&utm_medium=product&utm_source=postsend

    • https://www.docusign.com/support