Overview

overview

5

Static

static

4

Fwd GPVTI ...IA.eml

windows7-x64

5

Fwd GPVTI ...IA.eml

windows10-2004-x64

3

ANEXO - PR... 1.pdf

windows7-x64

3

ANEXO - PR... 1.pdf

windows10-2004-x64

3

Outlook-apzs1fye.png

windows7-x64

3

Outlook-apzs1fye.png

windows10-2004-x64

3

email-html-2.html

windows7-x64

3

email-html-2.html

windows10-2004-x64

3

email-plain-1.txt

windows7-x64

1

email-plain-1.txt

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Fwd GPVTI COMUNICACIÓN PROCESO SANCIONATRORIO GPVTI - JEP - UIA.eml

  • Size

    640KB

  • MD5

    6697a94cdb76bd1e466c08e5f5b858e3

  • SHA1

    ee4743081673718f981c63f20cd39993ae95b212

  • SHA256

    fe86890c61c00bc5eeeda0d4c9038a432dc99200b8142f65001cc6a0fc730ef2

  • SHA512

    31913926ec414f7896cdd5af4963c39cd6def8c34c6485e1b21c57a43a005e4915253b78b3725ebaead52959558f4e9c58ab5cfa09f2d3a5a233c12d6e055c4b

  • SSDEEP

    12288:ilHolHoO22nWC4OxOL7ljWfTmvYnL64ZTrFPhEHyQ5aKqJDpJmxncBoyk:ilHgH32trOxUadnTZ/thV17tJma8

Score
4/10
pdflink

Malware Config

Signatures

  • HTTP links in PDF interactive object 1 IoCs

    Detects HTTP links in interactive objects within PDF files.

    pdflink
  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

    pdflink

Files

  • Fwd GPVTI COMUNICACIÓN PROCESO SANCIONATRORIO GPVTI - JEP - UIA.eml
    .eml
  • ANEXO - PROCEDIMIENTO SANCIONATORIO 1.pdf
    .pdf

    • http://es-CO4.es

    • https://www.funcionpublica.gov.co/eva/gestornormativo/norma.php?i=127580#0

    • https://www.funcionpublica.gov.co/eva/gestornormativo/norma.php?i=41249#0

    • https://www.funcionpublica.gov.co/eva/gestornormativo/norma.php?i=41249#67

    • https://www.funcionpublica.gov.co/eva/gestornormativo/norma.php?i=41249#68

    • https://www.funcionpublica.gov.co/eva/gestornormativo/norma.php?i=41249#69

    • https://www.funcionpublica.gov.co/eva/gestornormativo/norma.php?i=76835#2.4.1.2.44

  • Outlook-apzs1fye.png
    .png
  • email-html-2.txt
    .html
  • email-plain-1.txt