General

  • Target

    attachment - 2024-08-23T105604.501.eml

  • Size

    183KB

  • MD5

    75c9b2824a7d9a62a586c5d045f7a82b

  • SHA1

    696f2c721f8161ec01e35e0a837915b11e41724b

  • SHA256

    8e7c1a8b6994454b40eb62022f725528ef017e4210b0cdd59142e1d7e23e96d6

  • SHA512

    2b5c20294e2f7f9e2fefa0b90343510d3a15f91058a3b194cb6eec60f4e73ce8865eb18220094a7c955eb4c0c5ac600a7fc401cd9f0efc9f1a2cfce91ca51c3f

  • SSDEEP

    3072:JRpolv0b54AWyG3waouFRJVdgZd9rIpulC2z7O0ZtdIOD84HMxTs:GlkSAW12uFpUApuo2dZteFaMq

Score
4/10

Malware Config

Signatures

  • HTTP links in PDF interactive object 1 IoCs

    Detects HTTP links in interactive objects within PDF files.

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • attachment - 2024-08-23T105604.501.eml
    .eml
    • https://url.uk.m.mimecastprotect.com/s/MahuCKZr9h52x40fMfKumwINV?domain=topland.co.uk

    • https://url.uk.m.mimecastprotect.com/s/WdRVCL89WcnRMQ5hqhBuM6Bj5?domain=mimecast.com

  • Outlook-A close-up.png
    .png
  • TOPLAND .pdf
    .pdf
    • https://promaquina.com/wp-admin/indexx.html

  • email-html-1.txt
    .html