General

  • Target

    message.pdf

  • Size

    85KB

  • MD5

    af86834df2102ae09744fca252b84258

  • SHA1

    a8ae16bbd29912bfa19786173386cb67ebdee181

  • SHA256

    3252ba667e20adc9f84921016179b0e2ef558ed690492b3a7f9bb0fc29676e5d

  • SHA512

    90909479976acbe4a5f5aa24dc538edb33692a8a5fbec55d4cf2f6b7e43480b3034f59d6b7c74f05ab6e73ee3f0968d98c5f26e564ff19aa681906e30622e432

  • SSDEEP

    1536:IdrmEyJTVVVVVVVVVVVVVOsbRnlhT1b/b/aqP4YaoH3AlOl9za//L9:SrmbxVVVVVVVVVVVVVZ5/xQYaoH3Aluo

Score
4/10

Malware Config

Signatures

  • PDF has QR code that contains a HTTP URL

    PDFs with URL QR codes are often used for phishing

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • message.pdf
    .pdf
    • https://intellzar.eu/login.cdn.microsoftonline1.3018201000000.session