Overview

overview

3

Static

static

3

attachment...yg.pdf

windows10-2004-x64

3

attachment...yg.pdf

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    attachment20260809-1169-qbdiyg.pdf
  • Size 7.5MB
  • Sample260809-lhkxjacp6s
  • SHA256 648d18d0b4a57d2a2c56f2122fbbb547475b73f918a3a88023e2c41d35bb7e47
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
pdflink

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

    pdflink

File Explorer

  • attachment20260809-1169-qbdiyg.pdf
    .pdf 7.5MB

attachment20260809-1169-qbdiyg.pdf

  • SHA256 648d18d0b4a57d2a2c56f2122fbbb547475b73f918a3a88023e2c41d35bb7e47
  • MD5 SHA1 SHA512 SSDEEP TLSH

Extracted URLs

  • file http://www.cofense.com/

  • file https://support.cofense.com/

  • file https://support.cofense.com/hc/en-us/articles/27216758211735-Cofense-Vision-Integration-FAQ

  • file https://support.cofense.com/hc/en-us/articles/6139156634263-Best-Practices-for-Categories-and-Reporter-Responses

  • file https://support.cofense.com/hc/en-us/sections/360011022193-Product-Documentation

  • file https://support.cofense.com/hc/en-us/sections/360011022273-Product-Documentation

  • file https://yara.readthedocs.io/en/latest/writingrules.html