Resubmissions

06/08/2024, 11:42

240806-nt3mtssblh 4

General

  • Target

    NetflixBill.pdf

  • Size

    84KB

  • MD5

    6fc5ecfb5678667f647f52301bd6aa92

  • SHA1

    1600b320b5953491613336b297529b5589ddc851

  • SHA256

    53cdef123afedca6ebc475442510bf2b5e97b68c36ff545c9b9bbc203ad646a6

  • SHA512

    b6d07f2612979e8a3084734bf97befd7fa539579185d9daa8a81aa78c1d7dffb4bf45ef0886bfe177ff13295bf868804c2cdc9b28bd61bfe6428c136643f4a05

  • SSDEEP

    1536:Be+a+rluhsHpcAkjIfvtTmoaARUdpt/MsXFDPyi2Yq/yjfDEcQGkygfMNVMIJ:I+a+Buly1iltLtpa/ajLQffi

Score
4/10

Malware Config

Signatures

  • PDF has QR code that contains a HTTP URL

    PDFs with URL QR codes are often used for phishing

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • NetflixBill.pdf
    .pdf
    • https://yix.twj.mybluehost.me/Nettflix/netflix/login.php