Report - 1607e659fd69a9---zemoxoxasu.pdf

PDF Suspicious Link PDF
ScreenShot
Created 2021.10.26 17:57 Machine s1_win7_x6401
Filename 1607e659fd69a9---zemoxoxasu.pdf
Type PDF document, version 1.4
AI Score Not founds Behavior Score
0.6
ZERO API file : clean
VT API (file) 17 detected (Phishing, Save, Gerphish, Camelot, CLASSIC, Malicious, Gen2, Phisher, Static AI, Suspicious PDF, score, Phish)
md5 3caef62c45bde425fbd43405f44814d8
sha256 bfc54797db2e38a1a41a3a96a8e363b9fb51cb6bbfab3b73f148fa6cb7f05b0f
ssdeep 1536:lcOa3mjOoPLC2rJfBrr7A/zRTEH9DYZWJiLiiYLTzKAjpWVXuK:qZWjZPrr7F9DYhmiVAtQ3
imphash
impfuzzy
  Network IP location

Signature (1cnts)

Level Description
watch File has been identified by 17 AntiVirus engines on VirusTotal as malicious

Rules (2cnts)

Level Name Description Collection
warning PDF_Suspicious_Link_Z PDF Suspicious Link binaries (upload)
notice PDF_Format_Z PDF Format binaries (upload)

Network (0cnts) ?

Request CC ASN Co IP4 Rule ? ZERO ?

Suricata ids



Similarity measure (PE file only) - Checking for service failure