Resubmissions

09/08/2024, 17:47

240809-wc83aatckk 4

09/08/2024, 17:44

240809-wbfz4stcjl 4

General

  • Target

    Secured Doc-[pvZ-37476].pdf

  • Size

    1.1MB

  • MD5

    cd09d0955f487e5cf925398ed2fb83b4

  • SHA1

    a92ab33ba305d5f56596c0344d2fe9c99ff5aee5

  • SHA256

    24b6631ff22f1085e83cf602900b703b4d8a1141caccbed0393b2367bc64b062

  • SHA512

    dea769ae2352dc9cbe6946b564ded085c4a75cc48c88fd031cdb9fe3145351642317cc0d2c160273b169ad16dec9c7d63d7aa132d93f153403affff6fdff7c5a

  • SSDEEP

    24576:Y6G3BkkJSFuTJ/hMF+/D+PYgw1kHF23t5:YHR3IFuV/em+w1UQ3v

Score
4/10

Malware Config

Signatures

  • PDF has QR code that contains a HTTP URL

    PDFs with URL QR codes are often used for phishing

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • Secured Doc-[pvZ-37476].pdf
    .pdf

    Password: 765432

    • http://directory.actknowledge.org/?settle=true&autoLoginAttempt=true&destination=https://dalexglobal.com/ahhgdbbed/sTuLcFUrfAWbWAd/A7IRkk7KSY2V6PhXhe9uixCi6N6SFD