General
-
Target
0b0bf5de0c0a26efa0770335c52cc970N.pdf
-
Size
156KB
-
MD5
0b0bf5de0c0a26efa0770335c52cc970
-
SHA1
993f72e562cbeb142f08e3962e72c3dedc41cfc7
-
SHA256
80d039017e2d86c4aeace196451740e50e5ec8b14055af986cbf812301da2c15
-
SHA512
32f3b1fa658f1b8aba26025160e3809ae797e35ef5ee3a394f0a5d6d7e1b714905811427bad24775bc1494fdf04cba4febe15875077f4ec380c31f629886df3c
-
SSDEEP
3072:TqZKcbXanP1vROTsnrzhC2R8F3yqVIoAMclr4L2+2zCtqBUjdEV0u8DaiK:TFKXatvYWfc2R8X7AMlc+tqCCz8DDK
Malware Config
Signatures
-
PDF has QR code that contains a HTTP URL
PDFs with URL QR codes are often used for phishing
-
One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
Files
-
0b0bf5de0c0a26efa0770335c52cc970N.pdf
-
https://siat.sat.gob.mx/app/qr/faces/pages/mobile/validadorqr.jsf?D1=0&D2=1&D3=%7C%7C2024%2F05%2F03%7CECO150904EL9%7CCONSTANCIA+DE+SITUACI%D3N+FISCAL%7C200001088888800000031%7C%7C_jTTbqSeUuYN%2B4DKBfDiwH0w2F3My4YO2I4Ob2TcruGSh4L6NaTTCOlPXcS4tEwUlnGFgfSiY7ssgtFmw8YCbm5hwkB%2BAGjGPkGKAkkPdkic7BtRovPKBdWx1R6Qb548RthdmBvUWpsswzE0uvVl%2Bf5pr3sxowPn5071Povw8D9A%3D
-
https://siat.sat.gob.mx/app/qr/faces/pages/mobile/validadorqr.jsf?D1=10&D2=1&D3=15090172496_ECO150904EL9
-