General

  • Target

    fv08002469850002400026260.pdf

  • Size

    95KB

  • MD5

    62071fcad8d8a98b0b90add77479c706

  • SHA1

    dd2878489de46df7c8b65dcfc4b9afd3ab7e9ae5

  • SHA256

    b97b920a8e70f3008bcf88ca81fca946eb1efe0d4d1c252d559c0dc2d65f8c28

  • SHA512

    28be53ead01c7d212b618395beb619f715a445dee00ffe8c64cfa2a23eda01704fdc0429551edca2ce41181b7a44b6f6fd67c75f51c9d28bf9b1106d864fc779

  • SSDEEP

    1536:jaxcmozabA0MIfuhM2W78idbUo/l4HvXMeIZvv/cfqn2yL1q8D:A4cX2m2W78Nf8FHcfo4S

Score
4/10

Malware Config

Signatures

  • PDF has QR code that contains a HTTP URL

    PDFs with URL QR codes are often used for phishing

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • fv08002469850002400026260.pdf
    .pdf
    • http://colgas.com

    • http://hotelesdann.com

    • https://catalogo-vpfe.dian.gov.co/document/searchqr?documentkey=b8e6e4146e640e0bc664b9e4ac72b98aec46cc3c93778451a55b92e9c6f9e4448d4c927387d70324f9a5d1763df4c414