General

  • Target

    attachment (69).eml

  • Size

    205KB

  • MD5

    373ee95081506d8a450c19187ffbb9b4

  • SHA1

    03b241846b8c5e7df9a34c15040f7eaa138ec6b5

  • SHA256

    ce146dfdb096536752038a1e7666b4eddd2828db994b887775760c43f94c9eb1

  • SHA512

    9ea8563f2c3e0784d99f1db043ee967a23eb3357ba4dc4072989f4bd3c5e2816643444db8e5361befe718a0676a94b426fc2d8d247cc532b1bc4ef6ce1cc1b9d

  • SSDEEP

    3072:FGO445BWR2h1SW/F8e3fAM4w9F4fe9uiXTrwQRk1Z9M6XiKzAYUYWvW7GsDij9QM:X4d2h8qG8f2lMjrl47MyvWvYGawx

Score
4/10

Malware Config

Signatures

  • HTTP links in PDF interactive object 1 IoCs

    Detects HTTP links in interactive objects within PDF files.

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • attachment (69).eml
    .eml
    • http://url.uk.m.mimecastprotect.com/s/0DaBCXoxysXRlx7ls6f7CWxu76?domain=bealllc.com

  • Beal LLC.pdf
    .pdf
    • http://bealllc.com

    • http://www.bealllc.com/

    • https://recieveddocumentation401610.invisionapp.com/freehand/BEAL-LLC-6eNZVPVbW

  • email-html-1.txt
    .html