Resubmissions

29/08/2024, 02:51

240829-db9cjssblk 4

General

  • Target

    Issued insurance policies rvvn.pdf

  • Size

    18KB

  • MD5

    82d328846167fe4c32f8c095345bda04

  • SHA1

    4ccbbe8d4de0d96fadfe1362088dbecbedf4dc70

  • SHA256

    408d0f9368f41daa661a7a00d19b419a8b4756dd6ae9921a5898d65ec0c67f52

  • SHA512

    501ff489d8375c36e375cb9b8ed39d4911c5599b7b07c748d74598e074ba268b8125dee54b9f2f4c67f5110d526082308f0af5fd5e3c87b91c4106e5eb339cf6

  • SSDEEP

    384:okJhCAdHbLiLlfhetmDDm+TnalCEV5yIrfSVqLEuQmspACWVaNCUSH3:lrCAdH30lfEpKaQkrqV5Lk4c

Score
4/10

Malware Config

Signatures

  • PDF has QR code that contains a HTTP URL

    PDFs with URL QR codes are often used for phishing

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • Issued insurance policies rvvn.pdf
    .pdf
    • https://muepqizbpq.thainv.shop/[email protected]

    • https://na3.docusign.net/Member/EmailStart.aspx?m=174f91ee-0851-486b-b0a6-003ad9aa6b3e