Original EmailEpalma[.]eml

Resubmissions

27/03/2025, 13:20

250327-qlbkgssvfx 4

Sharing

Copy URL

Twitter E-mail

General

Target

Original EmailEpalma.eml
Size

861KB
MD5

a873129bb5e71404921e5aa6470f009d
SHA1

24ee1946732eb5c995015b1bb69d2b0df2145967
SHA256

24057ad95b99c158df7c3016de14d25ec009f967b71e660623aae6eb3d106c06
SHA512

cbcb8da024dfc226066066889cc6bce042d1323019d6860d238b551917a953d69f4922b5d349aa47d780bf99e466a9f791b4dcd983166dbc400d499b8e9c4ea1
SSDEEP

12288:kBv6HUQgthplAhWyRe11A9fMfcJsSjUkfgnMnJirzQB7h+AoUi3J3oZyAPFskMfS:S0UDtPlUeIeSBfpu4cG0APmjAzpv

Score

4^/10

pdf link qr

Malware Config

Signatures

PDF has QR code that contains a HTTP URL
PDFs with URL QR codes are often used for phishing
pdf qr
One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
pdf link

Files

Original EmailEpalma.eml
.eml
- https://epidataconsulting-dot-yamm-track.appspot.com/24HAVR4L95V1L07s5cTKcfCxYLZI3jaRe5DBjNvHkLWD7mqvXlQFUWQO4t0d5nGUp-kNp3tDoQjRQL4kFo5Bd6AqrpWS7Dg3nEo1e0d-7kY6NoxFRWiR0JBfaH5piQmv1v67zl_6YX3RqT3k2Xd8CX8CkF9WdbYWCmHrtw6EqgaCVgjUZAjBGLoxz2v-WMi0kesj2Fiq3tkQFZoEgTX3HAFKcSEioJAzmTF35gJb3AOELdbBpeBSJEHvZ8yeIBq4qYYd_ehUawNSfO6cINB60IbCBdxNbJk2_kT4BLUCAq0gk2MWn7gi9qmQKFxVuvsSem5mNZ2NiC-tyIbz7QjcyJVPJvrg1uCXQZ90AX1jGVyPpd4K9T750Ob5rYfU2x3rawyTaDr46dhscToDcRu8kDbZBmcnC2Ky3cazeTS29qfNczPsGhvxR2mV8yVSPPIhHoVmCtuxahejaW8mfniUTUtpL74I6pamYJl7y
- https://epidataconsulting-dot-yamm-track.appspot.com/2MWyfhP53egGFdOhAwdWrUCSvxqvwS7UN9TwkliMGoF74mqvXlQEPuE0WVB9qUn-C3i5VTYcra6PU2a0xe2dHfgdFayKMbqD_m8OyNBIxkY2H4XL-YO3OrZ6JvrFew0_6I6bdzoTL4KnVj2KQuDAd5fdeE8-zLxpHAIXCUrWpwGe-1svpzlgxzzv5RplPxvhk9tk8qKe96RXu6iJiixjBOjsZmRsoNly5rlK_lLmMRfg0unQMvuLihowH7IczmqTwmQEXaaenqWFbeQYQ9ojS8axBonahcf8Zh43mojNiQnx_lDb2Mc1NNJ-HlqsSYT0rvhgN6oChVEMkEBBEipIjszNf8JE-7Gb0AL1-_EhOGJPrku-gsFRmmtFFUSyZxFWCBBQ2OcNaPBZOayJGlYri8q8lFHk93GsEvsgTbTP821kpJNrn3N0kIPcONLVdjJHe2fd6QylW
- https://epidataconsulting-dot-yamm-track.appspot.com/2Zn8XHxObUD16q8y_HC4Ez7RIDDQr42rFeeyDl8S4IQkDm6vXlQEo2gxDo5yRy3qF5IQWysa2k2HoIH48lM0_JGzOQTaknK3VcQA9QUvIzKebdjPsL-M2SuCrRzjiJWMl5K3RCaOd9rVI36Tq-dd6KXJ1fWd4he6CF6Sc-8KnpuzpIfCgCCmOVJIrVVzrssBtXZG1ddmV3wDe1a0ATgYf_H3Q49Ez4PqPliKnpsKPfE1JXtnkPoogk7PfMmxIhOQPfbRJdfhI6j5E8NghAE-2MbwjgnWT6dfGnw7HVn9BOq8270XcDd7mBFSeGgHweOSmVbJ4eFkkAvYQmmEUHxi0EdmCi-0erq55IuCkpkfhzmthF_2Y9rRR7i9aZPlxNhJ3D_NmJtXWznmTh8viUobl0cMpy9iP6jetzGiJm0EU_vKtAy2oPxvtbGcoIhuFQ4yyMd-EXZUHyR6XN3qLeLJiwYI2daZbZvVk-XQV
- https://epidataconsulting-dot-yamm-track.appspot.com/2rov_8zGzsWBstSZXjEUMAg-1fXgKjtnZHg8yPK2v4Jj2mqvXlQHpS8t9r4GmjMnqI6VBn0AdVcj0x2Shc5boCCS5y-Ep_o02Zw_Gg95dJ-22Z6bCGt4KAc7SEJNpfhTEGUWbLT7KqdOTr4gAzJLPTMCmJC8YaFh2W1Ek5N66ybbo32YHL9mb7PpHYoZSikUWJLoDnI1T3Qa91VLy6sApE-5g5tRWg7WL4yftEJMQ5YeMDcx8eJpVOPPkicGEiI8IF7eS6WRQ5yhMyGWTk8Wq1lBHvbGzv48J2zzuRT_WhBWo0oGh98gWJpd7_gYi
- https://epidataconsulting-dot-yamm-track.appspot.com/2vOCtPfh4mrNe9s-OrWYciFfG0sF5bbMhc3eZQfYWy8cAm6vXlQHDa3Ux0sCbeosTNeYUqeomVHxaTlII9GfxTwVCzM6BwwYyoAAYSqyyGizMzLTyNyYpMGj_3gg1xJCDKrc-UDpUEKYKElq4tWNmX_yl5famUuQ0bxT7rR9j1EAL4jtynVgp21IQFIH9u0buq5uAoVx3s2yEylPsF4hFK1ugo5qA4ULy2EgwApW1ou698_cWrLxe8CNTD03p81fw25dhKIlceOcqrSs6hPSyQkJbKRaCWUjDe6f2p9Z0-DMkO_jGHob4Jc_tRXEu2ZHqhQK-DqIfUjBIOMRjZUQx17bnZzFrtePzUgQFvv35AsiOMd-tg4yCh1u8__wEaBUx0j5Z2QDYOMwAFol2Ngwq9kqoVU3BJUPWvGHXPV2FSWxYpl-dSKd2Vx5RDmq58MS0lXtYxTsxr8ld3pyLgpkzCehYScGD7-D0VDM
- https://epidataconsulting-dot-yamm-track.appspot.com/2vvonYM4L0Bu3azD_m3_TBqtE3Ke2gEYdvxef148ZMJX9mqvXlQFyH5KunRHwoW5e-lrtHqxg4pRWSiZUi4EMQrC_8ctWLa4ucgl0hWKcuvWqga-rBl2vccQjVUv1vADUjDNGKauJt-17Kg9X4nvDzGKXAEIMs38rh2ZStIIkn01gxxWpOvVS7s-B9_RFZnsfz0srpA4ZYbJe2hx7CUk6Sfm5zuijciI6N-hMaUO9BotKEAL34UcTrLjndQf1f4VMFacHSw-_P3-D8KEuHkjLtAhXhhyfgf3m991sfP3CkIcGy2r0-XNgcw6CStAYVG3haLYJj7PQFJJawyrNSD5eMB--j4z7swp_JeiejaKzmFDKaeMEQItCUF5MLcgb8o23Sqac4PjegW-n7bGD06RLjDEn_ZUh91JE5wCitaRVCqnYTQGZ0OEUl60TCaW0kHIW5pHdZgzc3WCXJO__ykmLY96y2XENV0QwqA
- https://liveware.com.ar/silver-solution-partner/
- https://protect2.fireeye.com/v1/url?k=31323334-501cfaeb-3133b30a-454455535732-6887593c750f87dd&q=1&e=1719ecb1-4b4f-48ed-91cf-ac4b70f9fb0c&u=
- https://protect2.fireeye.com/v1/url?k=31323334-501cfaeb-3133b30a-454455535732-7d1d64f71634dab3&q=1&e=1719ecb1-4b4f-48ed-91cf-ac4b70f9fb0c&u=
- https://protect2.fireeye.com/v1/url?k=31323334-501cfaeb-3133b30a-454455535732-87ee67d9cdb4c3ea&q=1&e=1719ecb1-4b4f-48ed-91cf-ac4b70f9fb0c&u=
- https://protect2.fireeye.com/v1/url?k=31323334-501cfaeb-3133b30a-454455535732-b457accc71257637&q=1&e=1719ecb1-4b4f-48ed-91cf-ac4b70f9fb0c&u=
- https://protect2.fireeye.com/v1/url?k=31323334-501cfaeb-3133b30a-454455535732-cae7bcb8e72d07e4&q=1&e=1719ecb1-4b4f-48ed-91cf-ac4b70f9fb0c&u=
- https://protect2.fireeye.com/v1/url?k=31323334-501cfaeb-3133b30a-454455535732-f5ea6b74395ddba3&q=1&e=1719ecb1-4b4f-48ed-91cf-ac4b70f9fb0c&u=
- https://s3.amazonaws.com/htmlsig-assets/spacer.gif]Epidata
- Show all
Triptico-Epidata.pdf
.pdf
- https://epidataconsulting.com/
email-html-2.txt
.html
email-plain-1.txt