General

  • Target
    ConfirmationRealisation_FPE_Sess1222529_Cli907388_Id81.pdf
  • Size 128KB
  • Sample260929-wf2sdazflg
  • SHA256 e6b10991736daf14ccc9a5d8450f05e3a765583477ebf516f3c179760ca1507c
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
4/10

Malware Config

Signatures

  • PDF has QR code that contains a HTTP URL

    PDFs with URL QR codes are often used for phishing

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

  • One or more email addresses in PDF identified

    Detects presence of email addresses in PDF files.

File Explorer

  • ConfirmationRealisation_FPE_Sess1222529_Cli907388_Id81.pdf
    .pdf 128KB

ConfirmationRealisation_FPE_Sess1222529_Cli907388_Id81.pdf

  • SHA256 e6b10991736daf14ccc9a5d8450f05e3a765583477ebf516f3c179760ca1507c
  • MD5 SHA1 SHA512 SSDEEP TLSH

Extracted URLs

  • file https://apave.fra1.qualtrics.com/jfe/form/SV_e4nXukoprXkxwCF

  • qr https://apave.fra1.qualtrics.com/jfe/form/SV_e4nXukoprXkxwCF?Q_CHL=qr

  • file https://apaveprod-cd2-g4fbhjbzajc3h8bn.z01.azurefd.net/-/media/Files/APAVE-FRANCE/Autres-documents/Formation/Apave_Politique-de-protection-des-donnees_FORMATION-22102025.pdf?rev=cf89ad6f1592451badad647d24433d9d&hash=9BD6178A7114091D30CA323E1560145B

  • file mailto:[email protected]