General

  • Target
    attachment20261012-1275-f48rew.pdf
  • Size 93KB
  • Sample261012-3k4k4act8p
  • SHA256 4cbc9991537192985db3c38b927e25a541a6695027c3ce90179e09847036f8fd
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
4/10

Malware Config

Signatures

  • PDF has QR code that contains a HTTP URL

    PDFs with URL QR codes are often used for phishing

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

File Explorer

  • attachment20261012-1275-f48rew.pdf
    .pdf 93KB

attachment20261012-1275-f48rew.pdf

  • SHA256 4cbc9991537192985db3c38b927e25a541a6695027c3ce90179e09847036f8fd
  • MD5 SHA1 SHA512 SSDEEP TLSH

Extracted URLs

  • file https://community.docusign.com/new-member-guide-142?utm_campaign=GBL_US_PRD_AWA_2405_CommunityCTA&utm_medium=email&utm_source=postsend

  • qr https://docusigndocacessportal.dandvetclinic.ca/d9838b38db7f4e9e9c0dcac6c4e0a511/?IxodEr=b01nqHC&u=&[email protected]

  • file https://protect.docusign.net/report-abuse?e=AUtomjpFak9GlbPL0zFFi11G-qC1B6iI-p5Asjd2IBiB7XFf5lTMLtdpzpRNOqoLL4pEtR-5__GmumNf2gogGDXE8ReEVxkKZWAgZZId_CAStfQowwc-FDR6m4tPTGMb-ZVxbxFipBPro5WxF-kQnPZzgYTSdsikHKdVE0xT7w1Id5cNk4K2o5HUV0iAeJAcQ_fgOI3jcONE-ldOE1llbswGYvaqIVUUw0hYpLyLJXJZ8j5_PDs4AbyT4Jk1rquPZtAmmxhRz7dAFJoE9IPGN6jNVcw0mUVMLftqAGzifNcf_kwPdM1lzm-FbHdlQMyQcqu6oXy_JLAmj4LZOCBVWEKsokFQCn3G9BmUw80UHhUMm48ePE8E1US_7J0OXsjcvgZsUEIsy4P8kcP-FuUFZ0FviNkFm_IgFlunDpIVu6_eqX9cxRakWgk3zfjr0sTRyg&lang=en

  • file https://support.docusign.com/

  • file https://support.docusign.com/en/articles/How-do-I-manage-my-email-notifications

  • file https://support.docusign.com/en/guides/Declining-to-sign-DocuSign-Signer-Guide

  • file https://support.docusign.com/s/articles/How-do-I-sign-a-DocuSign-document-Basic-Signing?language=en_US&utm_campaign=GBL_XX_DBU_UPS_2211_SignNotificationEmailFooter&utm_medium=product&utm_source=postsend

  • file https://www.docusign.com/features-and-benefits/mobile?utm_campaign=GBL_XX_DBU_UPS_2211_SignNotificationEmailFooter&utm_medium=product&utm_source=postsend