General

  • Target

    Arrêt .pdf

  • Size

    411KB

  • MD5

    e61be017070e32f332346cf35623baae

  • SHA1

    519abc13bcf2630eb817c58f81d3cfc3a86a9988

  • SHA256

    46c37f6ac61c6154f90616e41f673e9a53136b33ff5247db5782ece7b83e8ebb

  • SHA512

    b7b785df77bcc47cc7c6413f96394e21c57f6b1aa2321675f586ef58b9545c856626466d050fe26e6af7fed1132924425cd4ebfb7ce5099e772b0c0a6a2a3e18

  • SSDEEP

    12288:Rg/7uGzL5V2Xr4MjSa+YLZmciLDebOtRXkzzUeaiLOw:Ea6Y40Sawci+bOkzwex1

Score
4/10

Malware Config

Signatures

  • PDF has QR code that contains a HTTP URL

    PDFs with URL QR codes are often used for phishing

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • Arrêt .pdf
    .pdf

    Password: a

    • http://www.ameli.fr/arret-de-travail