attachment20261001-527357-p07zwc[.]pdf

Sharing

Target
attachment20261001-527357-p07zwc.pdf
Size 1.1MB
Sample261001-hsamrssgnb
SHA256 6a579d1e4523e3f258a1fad0ebbd43ce6e1ebfd4482a776924a143f2b19883fe
MD5 591fba4fa41199dbe192b26b8152baa6
SHA1 9bfdae93bb404db8b9f880a1d473bf97615fe738
SHA512 bf6e27f7ac9cd153e45f65638813161d0b1098dcf21ab36822cc9d9c243ac00b22d36a296af5038d1c5c68e35be70aea1bfd02d684a6c65166b1f8cf8ba78402
SSDEEP 24576:wyuafeg3q3b8e4cMrgVftsbLFccccc27t:w/am45JmsbLxt
TLSH
T11235E00388186DCFD22943F47F0B3C6A7A5EB265E0C566F6322CCF872750E6A5C4B55A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

pdf link

HTTP links in PDF interactive object 1 IoCs

Detects HTTP links in interactive objects within PDF files.

resource	yara_rule
sample	pdf_with_link_action

One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
pdf link
One or more email addresses in PDF identified
Detects presence of email addresses in PDF files.
pdf

SHA256 6a579d1e4523e3f258a1fad0ebbd43ce6e1ebfd4482a776924a143f2b19883fe
MD5 591fba4fa41199dbe192b26b8152baa6
SHA1 9bfdae93bb404db8b9f880a1d473bf97615fe738
SHA512 bf6e27f7ac9cd153e45f65638813161d0b1098dcf21ab36822cc9d9c243ac00b22d36a296af5038d1c5c68e35be70aea1bfd02d684a6c65166b1f8cf8ba78402
SSDEEP 24576:wyuafeg3q3b8e4cMrgVftsbLFccccc27t:w/am45JmsbLxt
TLSH
T11235E00388186DCFD22943F47F0B3C6A7A5EB265E0C566F6322CCF872750E6A5C4B55A
MD5 SHA1 SHA512 SSDEEP TLSH

HTTP links in PDF interactive object

Detects HTTP links in interactive objects within PDF files.

pdf link

file https://1password.com/
file https://1password.com/downloadsen-USAdditional
file https://cofenseit.zendesk.com
file https://employeesupport.corp.cofense.com/
file https://employeesupport.corp.cofense.com/portal/kb?text=onedrive&entity=articles&id=22
file https://jira.corp.phishme.com/projects/PRODENG
file https://jira.corp.phishme.com/projects/PRODENGen-GB
file https://myapplications.microsoft.com/
file https://myapps.microsoft.com/
file https://mysignins.microsoft.com/security-info
file https://mysignins.microsoft.com/security-infoen-USen-USClick
file https://phishmeinc.sharepoint.com
file https://phishmeinc.sharepoint.com/
file https://portal.cofense.com/
file https://www.sparklabs.com/viscosity/download/en-GBen-GBa.
file https://youtu.be/FFQszYALS_A
file https://youtu.be/FFQszYALS_Aen-USSlack-provides
file mailto:[email protected]
Show all