Overview

overview

4

Static

static

4

22c8b45980...0N.pdf

windows7-x64

1

22c8b45980...0N.pdf

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    22c8b45980dbb61a94a8f21f4e3b8f20N.pdf

  • Size

    149KB

  • MD5

    22c8b45980dbb61a94a8f21f4e3b8f20

  • SHA1

    0a13c25b58b5bd7cee8d6ea425dba3cf381d26d6

  • SHA256

    9f2b207490a638b9ee979263633d7a899307631eb44ff04611a2f1afac2be217

  • SHA512

    18ad1d455d1afa92e73e19afe0ca13ccffad25d1382f56b6c548f516fb59e52c59b1836af25366ca41b0647c4e8dd9eee520e8931313b5ac753fcd93c1636156

  • SSDEEP

    3072:lIqZKcb3anP1vROTsnrzhC2R8F3yqVIoAOclr4L2+2zCtqBUjdEV0uu4A:CFK3atvYWfc2R8X7AOlc+tqCCzu7

Score
4/10
pdflinkqr

Malware Config

Signatures

  • PDF has QR code that contains a HTTP URL

    PDFs with URL QR codes are often used for phishing

    pdfqr
  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

    pdflink

Files

  • 22c8b45980dbb61a94a8f21f4e3b8f20N.pdf
    .pdf

    • http://demetal.com.mx

    • http://sat.gob.mx

    • http://vilowww.gob.mx/sfp

    • http://www.sat.gob.mx

    • https://siat.sat.gob.mx/app/qr/faces/pages/mobile/validadorqr.jsf?D1=0&D2=1&D3=%7C%7C2022%2F05%2F24%7CDMQ870603839%7CCONSTANCIA+DE+SITUACI%D3N+FISCAL%7C200001088888800000031%7C%7C_DFgDQ9KexfyrppJQ5Y3lGC2RBgTffj7WhTveKyXS5jRfY0Vl5eGnibmfeYzP5XOq71YLamC5iBDZtfV4fPTRvdC%2FTJLT1LTkKmDFj1wt%2Brkb8Gy8dPqoKc88J2DrQsLlKZU9EBT%2FWKhcO32OXmlHT5YJ4joOOMTCHY07YhDvqdE%3D

    • https://siat.sat.gob.mx/app/qr/faces/pages/mobile/validadorqr.jsf?D1=10&D2=1&D3=14100994682_DMQ870603839