Overview

overview

4

Static

static

4

Moneda639.pdf

windows7-x64

3

Moneda639.pdf

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Moneda639.pdf

  • Size

    80KB

  • MD5

    24ec37528d3c619e789429d16b02c73f

  • SHA1

    65f514fad01b747f91b3fb47f50694dd6bee99e4

  • SHA256

    bac0237b70665a390d810bd3a532496e26c2b5f915327305b7061087997c2557

  • SHA512

    9ca58ff74a8ee0ff0aaa5f6374f0d31018eb67a8a328cc854bc40843d126d7c60d075c5483d22dbcee70dd758b44e7be4a661df5f10d4e4c82462723c5497050

  • SSDEEP

    1536:1b+/GF3kFcex341YPH39Wnn8CT/+UmGEvyqT4X8+K/ph:h1rexYWHsnUUr0ph

Score
4/10
pdflinkqr

Malware Config

Signatures

  • PDF has QR code that contains a HTTP URL

    PDFs with URL QR codes are often used for phishing

    pdfqr
  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

    pdflink

Files

  • Moneda639.pdf
    .pdf

    • https://www.fortismerchants.co.uk/rd?cmnpn=93693&ct=90493&u=https%3A%2F%2Fsubcg.tynurserys.com%2FpCavcKaS#aW52ZXN0b3JzZXJ2aWNlc0Btb25lZGEuY2w=