Behavioral task
behavioral1
Sample
001.DemadaYAnexos.pdf
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
001.DemadaYAnexos.pdf
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
003.ActaDeReparto.pdf
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
003.ActaDeReparto.pdf
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
004. AutoAvocoTutela20241030.pdf
Resource
win7-20241010-en
Behavioral task
behavioral6
Sample
004. AutoAvocoTutela20241030.pdf
Resource
win10v2004-20241007-en
General
-
Target
NOTIFICACION AVOCO Y CORRE TRASLADO ACCIÓN DE TUTELA PRIMERA INS.eml
-
Size
72.7MB
-
MD5
621366736559ee32f71aa78921fc8ebe
-
SHA1
8c96b77e76519291f4d64243ff210a1c416f9028
-
SHA256
c1a14878e99f659f690ee82216640fdc826bd80e6e26cf6a76a29176b0904ae1
-
SHA512
67d9214b44faf0470df4687ac0f2b3fae71b54ab731e40a7429dea2fced5825cb2d0aa5f2bfa4159dfae77984d235a2aa9281f53f8f72da5acbc503a2d2f7cd4
-
SSDEEP
49152:Vtgojss7+VTvePpSEemZaIaeDlf+JAnrEoUzU2/dCpiVH0Lym+8+LdVAaO9+uEE7:t
Malware Config
Signatures
-
Malformed data in PDF
A PDF can contain malformed data to evade detection
-
One or more email addresses in PDF identified
Detects presence of email addresses in PDF files.
Files
-
NOTIFICACION AVOCO Y CORRE TRASLADO ACCIÓN DE TUTELA PRIMERA INS.eml.eml
-
001.DemadaYAnexos.pdf.pdf
-
http://3.es
-
http://gmail.com
-
http://momento.es
-
http://www.aliansalud.com.co/
-
http://www.dian.gov.co/
-
https://aka.ms/o0ukef
-
mailto:[email protected]
-
mailto:[email protected]
-
mailto:[email protected]
-
mailto:[email protected]
-
mailto:subdir_empleopublico_recobroyseguimientoincapacidades@dian.gov.co
- Show all
-
-
002.Prueba.jpeg.jpg
-
003.ActaDeReparto.pdf.pdf
-
004. AutoAvocoTutela20241030.pdf.pdf
-
Outlook-pczxrn0n.png.png
-
https://wa.me/qr/ZM32XWUZUE3DL1
-
-
email-html-2.txt.html
-
email-plain-1.txt