General
-
Target
Payout-(cschuster)_3729.pdf
-
Size
188KB
-
MD5
40a56deb3f550a9e222ea4489c21dffd
-
SHA1
15387fb383e30f7336c555ab132a2b806cec4283
-
SHA256
291fea2cfc6a3b142577f3147ad4734d7c950d8ee5be53f5cd38e61a2b69d795
-
SHA512
c01455fbe3d7052943772d4c217c8f2eaa015c95a638db4bf9fb4094a6fc16806bd56fb26cbb36d39c8aa65705578204ae686aabeee09f18cddd4764d66242f0
-
SSDEEP
3072:qwj/mNmanlm5NqbcZKcVJTvVLlolO0mi3c/Na+gUzcC/2GsgjxVorAefPJivtLWX:qk+NzoFPfT1loc0h3GajhcQoPknM5DbW
Malware Config
Signatures
-
PDF has QR code that contains a HTTP URL
PDFs with URL QR codes are often used for phishing
-
One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
Files
-
Payout-(cschuster)_3729.pdf
-
https://www-bonus-payout-terms.s3.eu-central-1.amazonaws.com/benefitsection/salaryref899943/terms/approved/AMkADBlY2Q5Nzg0LTA4NWYtNDU3YS1iOGEzLWMxYWZkOTQ2YjVhYQBGAAAAAAAlIu02FDUTQ6YWhUxKdPR0BwDwg7CXJ6EKQrtyHFJGL2FOGEAAAAAAEMAADwg7CXJ6EKQrqHFJGL2FOGEAAJrvSgcSSS4D/index.html
-