General
-
Target
[EXTERNAL] Undelivered Mail Returned to Sender.eml
-
Size
75KB
-
MD5
d55dbde3e3bb6b39e46be582cc5bb54a
-
SHA1
f0631dafc5a8f50d957a1079dd0b6ecb7c5974ef
-
SHA256
cbf800a89e08c83c452e6764362c33bd0b7ed2a8cf0130679de7b50282a4332d
-
SHA512
da7e875cf94c97c914810f57f6e2d579b398805d4e1de88d52f346a163b2a048cc7062f1c88c3a4f78cca5097af69c7fa539bc7bfef26baed203464357949eb2
-
SSDEEP
1536:w8cN+E0h6hmkw+X5VdRpAMnk5E7c1fNqr/byuf6y2eBrf9U:w8LkmkVXjE5E7c1VOYy2oy
Malware Config
Signatures
-
HTTP links in PDF interactive object 1 IoCs
Detects HTTP links in interactive objects within PDF files.
-
One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
Files
-
[EXTERNAL] Undelivered Mail Returned to Sender.eml
-
Manulife.pdf
-
http://manulife.com
-
https://brandequity.economictimes.indiatimes.com/etl.php?url=clickme.thryv.com/ls/click?upn=u001.Als7cfHaJU2yMdsJgpsIFls9ikgYn9wR-2FwXo9D3k00ByqrQ4tbqwvO-2Fy5lKEUB4S16tb_OEO3HRIZ3eedLymwLhvJt9sqs3j4T3CqpVCO9A0ZKplqH1W1Ad1lCPdQBrRfbSauZPLLCLTYBsXDRt8yGG5FOZ7NK342oFTufTBA9n-2F9XZNGWvk9QTdDPvfHUdAs7Zk26vZ6r7yI3sPNJXg-2BvYajg3X7aZSMKjsZ1ufjtPUBDP0tSqB2-2FIg5AEmv8Q7Q0eMRpK9woABi-2BgsYIjSID-2BPQ2uipgD05dJCUt5WWsh-2BqluHYiA1kL77iLFqvdEAzjNC6V-2FCTxWI-2FcdupqeyEWQt1tXS3XBNOZmz-2FitGwqOnpDFORC04mfyURm151Lce5NcCaCmi2iwR5duxJdmskZjNBMmkDtoqvU0Nq5usgH6Pnm-2Fc-3D
-
-
email-html-2.txt
-
email-plain-1.txt