General

  • Target

    13092024_0253_11092024_Label_waybill_original_BL_invoice_packinglist_shipment_09_11_2024_0000000000000000000000000000_pdf.7z

  • Size

    177KB

  • MD5

    195a4fb9c457308c9af637801da9b865

  • SHA1

    519d775505b4859cb4373594c5277450bda395e6

  • SHA256

    719eea91ddc292c32ac08be9bc762c47922f6c254311084c19f257db1b665cc5

  • SHA512

    a82a4b74a43c017ca4b8f968dd7693184bb6703d71b68fe03b0bf34c55f3121c803e822a00f6d2b37cf720453c30435f153111bee931245969aaafd755d5430d

  • SSDEEP

    3072:F/n2iZCDftpHp+NukxpMkpo8wM5eCoWDhxHs8Qza55SxHvrhknTfTOAvPsNiPv:AHppJ+AkxpRp5wM5e+TspzaO9kSsP/Pv

Score
3/10

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • 13092024_0253_11092024_Label_waybill_original_BL_invoice_packinglist_shipment_09_11_2024_0000000000000000000000000000_pdf.7z
    .zip

    Password: infected

  • DHL DOCUMENTS.pdf
    .pdf

    Password: infected

    • http://www.dhl.de

    • https://www.post.at/sendungsverfolgung.php/details?pnum1=CA610818135DE

  • Label_waybill_original_BL_invoice_packinglist_shipment_09_11_2024_0000000000000000000000000000_pdf.bat