=_ISO-8859-1_Q_attachment;_filename=3D (10)[.]eml

Sharing

Copy URL Twitter E-mail

General

Target

=_ISO-8859-1_Q_attachment;_filename=3D (10).eml
Size

96KB
MD5

2ea63ec891717de230aae9e365381715
SHA1

9145cb4a9946903564e9f503bc3b41f40fa9d39e
SHA256

e7265ae1f06be9898b1c645dc1498da723e3dc7b8b14ba35c492465f0c588225
SHA512

5746b1682c2073a8d0fc0aed53812a92dd89163f0847dda3ddef934eadf80e2783e3f9da3c09b81b7713e98afd8dcad825f693cbcf28993d5abdef110d516aea
SSDEEP

1536:G8wauUv+ZJMtP1o+LCHrUvkmk8pCEChoIsY8j/zriIGyi/I4hsRm9U:zwaDGJMLKPmk3zr8/rLagv

Score

6^/10

pdf link

Malware Config

Signatures

PDF contains one or more embedded files
Detects presence of embedded files in PDF files.
pdf

HTTP links in PDF interactive object 1 IoCs

Detects HTTP links in interactive objects within PDF files.

pdf link

resource	yara_rule
static1/unpack001/Facture-STEPHANE JAFFRAIN-ACCEFI-F-6829.pdf	pdf_with_link_action

One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
pdf link

Files

=_ISO-8859-1_Q_attachment;_filename=3D (10).eml
.eml
- https://url1349.invoicing.pennylane.com/ls/click?upn=u001.frLz-2FQ77eS76QUyxwAEoWoYjcCfCBcW0fORnsRScah-2Fz0or8AlcmOGtU2EBeJC-2Bm-2BS5PlsndrMVE9cVV7ys7y1oYullheZcUC-2BxovQ1t2PZECvVtEJzz0LHW9ji-2B65wZPDIJ1tc4HHgNX90Tdikx0oYszzsvFakYBwjOq52jqwtjbuwcJZj-2F-2B0xDtpnNwAUIbEnU0o0wlGEtsRZMnoZyeOQPpAG-2FSCBMdrbEb6xDqq0L7rOYvRpTCE-2BtSrS8vQcyHrgQE6PE4ExEduT5OX-2F64qeqA0RKxg6lhAhTOIx6800jMR92oTSTyQQ0KnY9egOBMdKFMETyvFyqSDrfcQZkxUsRWv2dtAmFrLd7rT6dhi-2BKV0wGph5QRRN4n2V5uyvU61KD0pP8155HOQKYwknQSh6q5amiPYPyG4oiko-2F1Vwd6ja5isGb5W4Y2EKNe4cbVQH-2FZhncgv15dQ1kea8cOp0Ps2tJhnzKNxVml1HePDHkBZKRDqQmrr7zmrEd6-2BL57PobOU96lnjOTew2-2BQW4Q48tFF5mUpT2RJ7FtcX6HUMV2uH7YEZUmtzju6-2FhG-2FxExvq4h1d7lXJDIanuRBbK5Ja-2FT-2Bdy0iwxdXNIwq3GrW1U55mrTBPODaa3eiVoai1Ck0YDbv-2FbgMTqPw1jS-2FAGoREz7Vv1uSnReXzETPitFUkyxyJKQZ9djwVR06kkfdgd3ijWBRJMf7-2FP9SSlivkwJ6Sc4pnoHe1ftnbGfI0OPwsZnpKoQN7fK5bkBjvCbKSqwa3vthN5WXes68dJeQs0AdSxtjYhI4SbK74V4n4d41-2Funx1YjRM8WJzxAy0RzTI-2Bv79Ni5eybBDDISi6FmSlEtugG5EHJgBXsJynPb6Skol2tyosnbSUFCu2sMx3NxnujkA9DWI8T-2FpitaOpihFOijvRH-2BRGwCUM8Fo1Z1cVrKq5oUCXySFiOqC58J4Zw-2B91GKCDY_uoJNvF-2FASjth9StXKTRb2Ktb-2FZo2YdCbXwN-2Bfxag92es-2B4eDdrHIlXb-2BOkZhUy55G8JBVnurDNOpwdVEPfv6ENbFq74bq0XDI71fP0exDZsdzSFBtTscrbzwdWA2psAMrrK0pcB0HXPBldRpDmeOUS9sE27a9rLOQwahWf4pBR6EVypSXDMoDJmUm4Bq9SvPQ55EFLz8q9FJYHjJ6eCdhsfBi1Q0YiKtzPFmpDmAEh-2F6GsCY3rdPueEzZT8JXHdANib0L5X3OVbw8Y016ijydVLKmkbRPAtZGDbzFlHnc-2FRHAJNbuuw32etrMEIL-2BbrP2dJppRifG6VyvxI3JFYQATirrQtbB-2FFh0cFrP0VR8kQ-3D
- https://url1349.invoicing.pennylane.com/ls/click?upn=u001.frLz-2FQ77eS76QUyxwAEoWoYjcCfCBcW0fORnsRScah-2Fz0or8AlcmOGtU2EBeJC-2Bm-2BS5PlsndrMVE9cVV7ys7y1oYullheZcUC-2BxovQ1t2PZECvVtEJzz0LHW9ji-2B65wZPDIJ1tc4HHgNX90Tdikx0oYszzsvFakYBwjOq52jqwtjbuwcJZj-2F-2B0xDtpnNwAUIbEnU0o0wlGEtsRZMnoZyeOQPpAG-2FSCBMdrbEb6xDqq0L7rOYvRpTCE-2BtSrS8vQcyHrgQE6PE4ExEduT5OX-2F64qeqA0RKxg6lhAhTOIx6800jMR92oTSTyQQ0KnY9egOBMdKFMETyvFyqSDrfcQZkxUsRWv2dtAmFrLd7rT6dhi-2BKV0wGph5QRRN4n2V5uyvU61KD0pP8155HOQKYwknQSh6q5amiPYPyG4oiko-2F1Vwd6ja5isGb5W4Y2EKNe4cbVQH-2FZhncgv15dQ1kea8cOp0Ps2tJhnzKNxVml1HePDHkBZKRDqQmrr7zmrEd6-2BL57PobOU96lnjOTew2-2BQW4Q48tFF5mUpT2RJ7FtcX6HUMV2uH7YEZUmtzju6-2FhG-2FxExvq4h1d7lXJDIanuRBbK5Ja-2FT-2Bdy0iwxdXNIwq3GrW1U55mrTBPODaa3eiVoai1Ck0YDbv-2FbgMTqPw1jS-2FAGoREz7Vv1uSnReXzETPitFUkyxyJKQZ9djwVR06kkfdgd3ijWBRJMf7-2FP9SSlivkwJ6Sc4pnoHe1ftnbGfI0OPwsZnpKoQN7fK5bkBjvCbKSqwa3vthN5WXes68dJeQs0AdSxtjYhI4SbK74V4n4d41-2Funx1YjRM8WJzxAy0RzTI-2Bv79Ni5eybBDDISi6FmSlEtugG5EHJgBXsJynPb6Skol2tyosnbSUFCu2sMx3NxnujkA9DWI8T-2FpitaOpihFOijvRH-2BRGwCUM8Fo1Z1cVrKq5oUCXySFiOqC58J4Zw-2B91Gbthx_uoJNvF-2FASjth9StXKTRb2Ktb-2FZo2YdCbXwN-2Bfxag92es-2B4eDdrHIlXb-2BOkZhUy55G8JBVnurDNOpwdVEPfv6ENbFq74bq0XDI71fP0exDZsdzSFBtTscrbzwdWA2psAMrrK0pcB0HXPBldRpDmeOUS9sE27a9rLOQwahWf4pBR5DiVyUI3MR-2BZnkIspHDWwfxsUJKqa5pLEkCzhsMU0bhyFhP0lq6opGHHFInXChfGZx9yFjz4LBkTOrPZvwm9WGNri-2BQ9jqZKAXFVXxTDBuSAXyTakeKWyL9JVyyGFbgHq81cVRW2n38zqWNnAudj-2B76BI6-2BvbxDoKwYl3ljCQNZstMI-2BIVj-2FcUgJJc9jxzUxM-3D
Facture-STEPHANE JAFFRAIN-ACCEFI-F-6829.pdf
.pdf
- https://app.pennylane.com/public/view_invoice?encrypted_id=eCNmTHvD6YU5EJV0N4qM4BqTUc0iVNGFuQISQbeTNBoWpOuUlprRlhTJrBU2FZXbkFnXSrI1v5V8MEi1VM%252B5SsgMQopVvGQG%252FBuTlHJDGJze9XrEsctNls%252F1BDYAk0Mou5rjSIraUnYS%252FEP6lqHezQoOKY3Ky%252B1NAWg6JZMR7mYONFTnZdgehtxVT9CYMgcYkWX6pD%252BFkv3W0a13o8xeFGNfm1JKkKd3xLxRMoeWJ7x3vcC8qfRQsQnTzrxPUlkSc2ZMsYCQmtlM5QgYnwrrO6ScOYXzohnNeT27ebe7nejaSvrweKRXpbbRTgO8Q%252FUV8oIDh5k%252FtXaj2gF%252FOI9rZjuezcstwgSUFpKHXXeqGQTNE6It7waH7cWOLJnllEwOZrkDTdVZ8GXfxRRHRQwprhRx6bSPmWftTYyShqeFE%252Fsy3wkyQBa4xmvw%252FREsNUMntkWYnOquZulR2evzh5KL8NF7OknPhdhmEw7QYQ%253D%253D--GjDsqX%252B8VukSTf1y--solHt8Kfiz54B36qJ0bVoA%253D%253D
factur-x.xml
.xml
email-html-2.txt
.html
email-plain-1.txt