General

  • Target

    ATT62939.zip

  • Size

    888KB

  • MD5

    61ebf42f7896a946e796dd7fc683a99c

  • SHA1

    cbe69ed2efbe59674aed43bfdf5ee6db7b8bb259

  • SHA256

    1c46616650d5b6750809992fb54e80576b78bf0c7afb4878248293962082dcf3

  • SHA512

    856b9acd9d85fd70fe08815f830f5d4c90dd41a32b63ad8eb1e55e38cf6357a75e9674f6ff117526795206f21d5a67701dd34d9f7d9a83ea44dc87b47ee7bd01

  • SSDEEP

    24576:IYNLhn1fuNteZR2LrrDzmorv1nnO2HHOh+KWM0X2:Lhn1fmMs3D31nVneN0G

Score
6/10

Malware Config

Signatures

  • PDF contains one or more embedded files

    Detects presence of embedded files in PDF files.

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • ATT62939.zip
    .zip

    Password: infected

  • ATT62939.PDF
    .pdf

    Password: infected

    • https://laioekse.blogspot.com/

  • Envelope.eml
    .eml

    Password: infected

  • attachment-1
  • Envelope_Hash.txt
  • daticert.xml
    .xml
  • smime.p7s