Resubmissions

15-07-2024 15:53

240715-tbwpfsyanq 4

15-07-2024 15:46

240715-s7p14sxgrr 4

General

  • Target

    Fw_ [New York Life Insurance] ROUTINE SERVICE REQUEST_July 03, 2024_Distribution__Notice_252379_Final.pdf with you_562339_Final.pdf with you.eml

  • Size

    127KB

  • MD5

    63f7f1528f723dedfca4bf45c893c8da

  • SHA1

    30f593008c28a90263e6e5b74b03543370ed646d

  • SHA256

    7547a838f8606ad81729caef1ea586dc5a45213c84fa71acde11189f9a85bbe8

  • SHA512

    f2b162d3db6e18baae5d5e19984d796ef6aff704ff7ec44b323a3b19924d9b9efaeb23717a7fb57b329d49145da18bc6b8a24f4ec8916b185a72c587873ee86f

  • SSDEEP

    3072:Z+QvJv/GQgRxURBkBr5GkuxdNxCENv/CnH4n5t3j355:Z+Qxv+Q+3r5HuRx5y63jp5

Score
4/10

Malware Config

Signatures

  • PDF has QR code that contains a HTTP URL

    PDFs with URL QR codes are often used for phishing

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • Fw_ [New York Life Insurance] ROUTINE SERVICE REQUEST_July 03, 2024_Distribution__Notice_252379_Final.pdf with you_562339_Final.pdf with you.eml
    .eml
    • http://www.xerox.com

    • http://www.xerox.com/

    • https://images.ctfassets.net/ao073xfdpkqn/20HKrrl4nPCo1uynhfixgX/bd38b86a08b3ea57d444db72bbc6403e/we-make-work-work-1200x628.jpg]

  • New York Life Insurance_SKM_66540_4161.pdf
    .pdf
    • http://Security.cloud

    • http://www.symanteccloud.com

    • https://​in0http​.xyz/n/?c3Y9bzM2NV8yX3NwJnJhbmQ9T0VaNVJHeGtaVWxTZWpRM2VIbDJaRlppVkVvPSZ1aWQ9VVNFUjAzMDcyMDI0VU5JUVVFMDI1MTA3MDM0ODIwMjQyMDI0MDcwMzUxMDI0OA==N0123Nnmved@ft.newyorklife.com

  • email-html-2.txt
    .html
  • email-plain-1.txt