Overview

overview

5

Static

static

4

External ...91.eml

windows7-x64

5

External ...91.eml

windows10-2004-x64

3

ReviewDoc_...an.pdf

windows7-x64

3

ReviewDoc_...an.pdf

windows10-2004-x64

3

email-html-2.html

windows7-x64

3

email-html-2.html

windows10-2004-x64

3

email-plain-1.txt

windows7-x64

1

email-plain-1.txt

windows10-2004-x64

1

f1d79874.png

windows7-x64

3

f1d79874.png

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    External _43908891.eml

  • Size

    85KB

  • MD5

    b911b7eb21499b110ef173c4571079f2

  • SHA1

    98ff106bfdf6b123ff97f5f19a4e8b23da3f406a

  • SHA256

    3b74b3d51d1befca5154a2a7d60fb10550e86cc1bd297157c26993c9f7226cd9

  • SHA512

    c936bd7c8ccf750fd37d32e1842abd1dde3c046bd8b0c196c01a3a89e3cc28d6fe48ce033526f2992b888d346ef0ad93e930271508e274f0233c505d269cb03d

  • SSDEEP

    1536:W+tSzz61To/9KVtJaoHiXrFG51wnrWC3bkqNIs0x65EHwCK5vmzbxwgfw2EJJJPo:W+sqIZXrFGTwKSY6YqvaxjERK9T

Score
4/10
pdflinkqr

Malware Config

Signatures

  • PDF has QR code that contains a HTTP URL

    PDFs with URL QR codes are often used for phishing

    pdfqr
  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

    pdflink

Files

  • External _43908891.eml
    .eml

    • https://aka.ms/LearnAboutSenderIdentification

  • ReviewDoc_Grant Monaghan.pdf
    .pdf

    • https://c1e6d94a.acf8fae7220567ffcc9c67d7.workers.dev?qrc=Z3JhbnQubW9uYWdoYW5Ac21pdGgtbmVwaGV3LmNvbQ==

  • email-html-2.txt
    .html
  • email-plain-1.txt
  • f1d79874.png
    .png