General

  • Target

    Confidential_Jkotlarz.pdf

  • Size

    59KB

  • MD5

    ba80b5e30cedf8028475888c3eec4aac

  • SHA1

    f583e15a4a0485d8cc7ee3bcdfb4ba9a41af43f8

  • SHA256

    c3182891f20359d3fc4d645a792b3b397e2efcb142cbcab2fc62a1e79f20a012

  • SHA512

    d6f29a8f57571d67330bc3c1ee0eab664a7dd2bd3fddb2fdcb4f2d2d042db5a5755dfb99c1fc0ff0bcc3c755755c4bb9ef6607a45b43ccbc7298aaaa44286a0e

  • SSDEEP

    768:wSVjkIITBjikjITgnUwEjJVlPa1Pjcdd4KcuJBmZ8v05/WEinNzNq8LSgfq8/J+s:viIITBjbonlGjcQZfobpNLRfj/J0L86K

Score
4/10

Malware Config

Signatures

  • PDF has QR code that contains a HTTP URL

    PDFs with URL QR codes are often used for phishing

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • Confidential_Jkotlarz.pdf
    .pdf
    • https://208-agentseo.trakqit.com/?u=https:%2F%2FQ5V95uRX.creandopresencia.com/ygfee/dftrygj/lbwucx&e=QneqY6vhnLXfjLywC91tV7QfM6WwS6gJ&cee=cGhpbC5wbGF0YW5pYUBhbG1hcnBsdW1iaW5nLmNvbQ==&c=E,1,sdEACxbVV8cGhIA5oF6vhwG1qgdvT0ctgWquTBroYYQ7z4XPn9-50GiMYURZKPomhJ2uDI8DK8UATjR9If2ZX2zcjzk0Gat9lqUZfy8uMBga8RS0Ctib&typo=1