General

  • Target

    PW_infected_Past Dues.zip

  • Size

    17KB

  • MD5

    30c81ef15d62450d5db44d3096366faa

  • SHA1

    4493385e1af46f379677011079c41b0e1b091c65

  • SHA256

    0b0c250bf1cc1fd3ef4a32ea989d5bac538c8dd3918d95de9ce0fa9852ecaae0

  • SHA512

    8968b0e7b98a591a5fee22d391a0d97a1962fc43392102d07d127e1d5b93f5c6d1ac711dbef5771af768a6300c73ba16204494d154e912f0b9cd33a91807e724

  • SSDEEP

    384:5dLDzNYo2/RiFsLZ77YvS66eq3JvELTqK3fo1AIa:LxYfvZuSqWKLTP0Aj

Score
3/10

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • PW_infected_Past Dues.zip
    .zip

    Password: infected

  • Past Dues
    .eml
  • Rubix_SKM_B78653.pdf
    .pdf
    • https://africanmaterials.com?yF-Ow/0493c0b5-75b6-4c95-8996-03fd86a763a4/ZnJhbmsudmVyaGFnZW5AcnViaXguY29t-PQ2if5T_Aj4DFfk1JA7OpRnn/fdd/eid=462