General

  • Target
    attachment20261012-3338355-74o47u.pdf
  • Size 94KB
  • Sample261012-3lp44afd54
  • SHA256 3faa61103f84dd852f5cc43e0b51f190763d719486f0a7eb86ab2da1633e2eac
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
4/10

Malware Config

Signatures

  • PDF has QR code that contains a HTTP URL

    PDFs with URL QR codes are often used for phishing

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

File Explorer

  • attachment20261012-3338355-74o47u.pdf
    .pdf 94KB

attachment20261012-3338355-74o47u.pdf

  • SHA256 3faa61103f84dd852f5cc43e0b51f190763d719486f0a7eb86ab2da1633e2eac
  • MD5 SHA1 SHA512 SSDEEP TLSH

Extracted URLs

  • qr https://corespondence-blossom-production.up.railway.app/nxfrwwode/nxfrwwode/nxfrwwodetfiusviusrudssgscmsc/nxfrwwode%7D/nxfrwwode/nxfrwwode/nxfrwwodeiusrudssgscmsc/nxfrwwode#aWFuLmVkbW9uZHNvbkBleHhvbm1vYmlsLmNvbQ==