Terms and Conditions | Freightquote

24:I[7638,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/1f7k-b47qno-6.js","/_next/static/chunks/3spet-0yezls2.js","/_next/static/chunks/2wvg5zqmbil4p.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/3l_wb6il5gi_h.js","/_next/static/chunks/3fc9w1ah_nm2g.js"],"SampleDetailWrapper"] 29:I[27201,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/1f7k-b47qno-6.js","/_next/static/chunks/3spet-0yezls2.js"],"IconMark"] 23:T483,{"@context":"https://schema.org","@type":"TechArticle","headline":"Malicious Trojan.Generic Sample e61ff62de47a… — Score 100/100 — Hybrid Analysis","description":"Malicious verdict for sample e61ff62de47a…. Malware family: Trojan.Generic. Threat score 100/100. 5/28 AV engines flagged this file. 2 malicious and 2 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/e61ff62de47a6fb43919dc47608b5f094413dadf49dc747d4163a279b2db71cf","keywords":["Malicious","Trojan.Generic","malware analysis","sandbox report","threat intelligence","e61ff62de47a6fb43919dc47608b5f094413dadf49dc747d4163a279b2db71cf"],"about":{"@type":"SoftwareApplication","name":"Oct_Inv_424550_09102023.pdf","applicationCategory":["pdf"],"identifier":"e61ff62de47a6fb43919dc47608b5f094413dadf49dc747d4163a279b2db71cf","additionalType":"Malicious sample"},"threatScore":100,"malwareFamily":"Trojan.Generic","antivirusDetections":{"malicious":5,"total":28},"behavioralIndicators":{"malicious":2,"suspicious":2},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}25:Td39,Object ID 7 contains compressed stream data: q /GS0 gs 0 0 0 rg .1 0 0 .1 0 0 cm 360 5535 m 5760 5535 l 5760 360 l 360 360 l h W* n 472.5 742.5 5175 7.5 re f 10 0 0 10 0 0 cm BT .2 .2 .2 rg/F0 7.5 Tf 282.797 120.75 Td [<003A>37.1<0044005C0056000300570052000300330044005C001D>]TJ /F1 6.75 T ... Object ID 18 contains compressed stream data: /CIDInit /ProcSet findresource begin 12 dict begin begincmap /CMapType 2 def /CMapName/R42 def 1 begincodespacerange <0000><ffff> endcodespacerange 13 beginbfrange <0003><0003><0020> <0009><0009><0026> <00 ... Object ID 24 contains compressed stream data: /CIDInit /ProcSet findresource begin 12 dict begin begincmap /CMapType 2 def /CMapName/R39 def 1 begincodespacerange <0000><ffff> endcodespacerange 4 beginbfrange <0003><0003><0020> <0014><0014><0031> <004 ... Object ID 25 contains compressed stream data: \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 ... Object ID 35 contains compressed stream data: \x10@\x00\x04\x07\xe8\xf3` \x80#\x18\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 ... Object ID 37 contains compressed stream data: \x10\x19\xdf\xfc/Z\xfd\x00\x0f\xff\xff\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x ... Object ID 38 contains compressed stream data: \x00\x01\x00\x00\x00 \x00\x80\x00\x03\x00\x10cvt \xaa\x86\xdcn\x00\x00\x00\x9c\x00\x00\x06Zfpgm\xc9\xbc\xda\x05\x00\x00\x06\xf8\x00\x00\x07\xc1glyf\x00\x00\x00\x00\x00\x00\x1a\xe8\x00\x00s\x10head\xe7Z\xd1\xe8\x00\x00\xaf|\x00\x00\x006hhea\x123\x18\xd0\x00 ... Object ID 39 contains compressed stream data: \x10\x00\xde\xc8\x10\x08\x04\x00?\xf9\xff\xe8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0 ... Object ID 40 contains compressed stream data: \x00\x01\x00\x00\x00 \x00\x80\x00\x03\x00\x10cvt GM \xba\x00\x00\x00\x9c\x00\x00\x05ffpgm\xfal.\xf0\x00\x00\x06\x04\x00\x00\x065glyf\x00\x00\x00\x00\x00\x00\x13L\x00\x00&\x18head\xe3\xf7m*\x00\x00R\x00\x00\x00\x006hhea\x0eG\x0e\xfe\x00\x00?<\x00\x00 ... Object ID 41 contains compressed stream data: \x10\x00\x08\x00\x00\x00\x00\x00\x00@ \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x ... Object ID 42 contains compressed stream data: \x00\x01\x00\x00\x00 \x00\x80\x00\x03\x00\x10cvt \xaa\x86\xdcn\x00\x00\x00\x9c\x00\x00\x06Zfpgm\xc9\xbc\xda\x05\x00\x00\x06\xf8\x00\x00\x07\xc1glyf\x00\x00\x00\x00\x00\x00\x1a\xe8\x00\x00\x058head\xe7Z\xd1\xe8\x00\x00A|\x00\x00\x006hhea\x123\x18\xd0\x00\x0 ...26:T4021,Observed string: " Terms and Conditions | Freightquote

Freightquote terms and conditions.

Terms & Conditions

IMPORTANT: BEFORE DOING BUSINESS WITH FREIGHTQUOTE OR ACCESSING OR USING ANY PART OF THE HTTPS://FREIGHTQUOTE.COM WEBSITE (THE “WEBSITE”), THE PERSON WANTING TO DO BUSINESS WITH FREIGHTQUOTE OR ATTEMPTING TO ACCESS AND USE THE WEBSITE (“YOU” OR “YOUR” OR “Customer”) SHOULD CAREFULLY READ THE FOLLOWING TERMS AND CONDITIONS (THE “TERMS AND CONDITIONS”).

THIS IS A LEGAL AGREEMENT BETWEEN YOU AND FREIGHTQUOTE.COM, INC. (“FREIGHTQUOTE” or “Company”). FOR PURPOSES OF THESE TERMS AND CONDITIONS, “FREIGHTQUOTE” SHALL INCLUDE ANY PARENT, SUBSIDIARY, OR AFFILIATED COMPANY AND THEIR RESPECTIVE DIRECTORS, OFFICERS, AGENTS AND EMPLOYEES. THESE TERMS AND CONDITIONS GOVERN YOUR ACCESS TO AND USE OF THE WEBSITE, INFORMATION AVAILABLE THROUGH THE WEBSITE OR FREIGHTQUOTE AND USED IN ANY MANNER RELATED THERETO, AND FREIGHTQUOTE ARRANGING FOR THE PICK-UP, TRANSPORT, AND DELIVERY OF TRUCKLOAD, LESS-THAN-TRUCKLOAD (“LTL”), RAIL AND/OR PARCEL SHIPMENTS TO AND FROM VARIOUS POINTS IN THE UNITED STATES AND CANADA (COLLECTIVELY REFERRED TO HEREIN AS THE “SERVICE”). USING THE SERVICE IS CONDITIONED UPON YOUR ACCEPTANCE OF AND AGREEMENT TO ALL OF THE TERMS AND CONDITIONS. IF YOU DO NOT AGREE WITH THE TERMS AND CONDITIONS, YOU MAY NOT USE THE SERVICE. BY USING THE SERVICE, YOU INDICATE THAT YOU HAVE READ AND UNDERSTAND THE TERMS AND CONDITIONS HEREIN AND, AS THEY MAY CHANGE FROM TIME TO TIME, THAT YOU AGREE TO THEM AND INTEND TO BE LEGALLY BOUND BY THEM. “YOU” OR “YOUR” REFERS TO THE INDIVIDUAL USING THE SERVICE AND IF YOU USE THE SERVICE ON BEHALF OF A CORPORATION, LLC, PARTNERSHIP, OR OTHER BUSINESS ENTITY, THEN “YOU” OR “YOUR” SHALL INCLUDE THAT BUSINESS ENTITY. IF YOU ARE USING THE SERVICE ON BEHALF OF A BUSINESS OR OTHER LEGAL ENTITY, YOU ARE NEVERTHELESS INDIVIDUALLY BOUND BY THESE TERMS AND CONDITIONS EVEN IF YOUR COMPANY HAS A SEPARATE AGREEMENT WITH FREIGHTQUOTE.

The SERVICE is intended for use by businesses and other organizations and not for consumer purposes. To the maximum extent permitted by law, YOU hereby acknowledge and agree that consumer laws do not apply. If however any consumer laws do apply and cannot otherwise be lawfully excluded, nothing in these TERMS AND CONDITIONS will restrict, exclude or modify any statutory warranties, guarantees, rights or remedies YOU have, and the Company’s liability is limited as set out in these TERMS AND CONDITIONS or as permitted by applicable law.

FREIGHTQUOTE is licensed as a property broker by the Federal Motor Carrier Safety Administration and/or other government agencies as required by law and, as a licensed broker, arranges for freight transportation. NEITHER FREIGHTQUOTE NOR TH" (Indicator: ""scp") in Source: urlref_httpswww.freightquote.comterms-and-conditions Observed string: "" (Indicator: ""scp") in Source: urlref_httpswww.freightquote.comterms-and-conditions27:T4f3,Pattern match: "https://timegroom.com/annotate" Pattern match: "https://www.freightquote.com/terms-and-conditions" Heuristic match: "Freightquote.com" Heuristic match: "freightquote.com" Pattern match: "www.freightquote.com" Heuristic match: "c/.Ve" Pattern match: "https://www.freightquote.com/terms-and-conditions/" Pattern match: "https://www.freightquote.com/terms-and-conditions/,publishDate:20220428},site:{region:North" Pattern match: "assets.adobedtm.com/launch-EN1f2840d683b946efb63c5c392f03352d.min.js" Pattern match: "https://www.freightquote.com/book/#/free-quote/pickup" Pattern match: "HTTPS://FREIGHTQUOTE.COM" Pattern match: "https://www.chrobinson.com/en-us/privacy-notice/" Pattern match: "app-ab35.marketo.com/js/forms2/js/forms2.min.js" Pattern match: "https://www.linkedin.com/company/freightquote" Pattern match: "https://www.facebook.com/freightquote" Pattern match: "https://twitter.com/freightquote" Pattern match: "https://www.chrobinson.com/en-us/your-privacy-rights/" Pattern match: "https://www.freightquote.com/book/#/sign-up" Pattern match: "https://www.youtube.com/iframe_api" Pattern match: "www.addthis.com/dashboard" Pattern match: ".msftc0nnecttest.com/redirect" Heuristic match: "0nline8t_nnnw.tte_tg_uie.com"28:T590,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1b:["$","$L2",null,{"children":[["$","script",null,{"type":"application/ld+json","dangerouslySetInnerHTML":{"__html":"$23"}}],["$","$L24",null,{"initialData":{"schema_version":"1.0.15","sha256":"e61ff62de47a6fb43919dc47608b5f094413dadf49dc747d4163a279b2db71cf","overall_status":"SUCCESS","all_analysis_status":{"qsp_status":"NOT_AVAILABLE","sandbox_status":"SUCCESS","fastscan_status":"SUCCESS"},"verdict":"malicious","threat_score":100,"unified_at_epoch_ms":1792121751026,"unified_at":"2026-10-16T03:35:51.026Z","metadata":{"hashes":{"sha256":"e61ff62de47a6fb43919dc47608b5f094413dadf49dc747d4163a279b2db71cf","sha1":"1e14f799cdfd14e9695772c8b403a99e854ae72b","md5":"e74bdf7f90db2455f3704cd35c807d4b","sha512":"682a6b173fcc317cf4520205b2094de50d0431e2357d152c57880a9184b5e8a7ff6b7867c255d4a04f805d8d1e700d302032c2745103a9c643bef490608d25c7","ssdeep":"3072:TXECZpz5wkicGhRizZ3aiOcBqGg1ASQRtJPI:TXECZpz5/MfC3ROcBfg1FOJQ","ssdeep_chunks":["3072:TXECZpz","3072:XECZpz5","3072:ECZpz5w","3072:CZpz5wk","3072:Zpz5wki","3072:pz5wkic","3072:z5wkicG","3072:5wkicGh","3072:wkicGhR","3072:kicGhRi","3072:icGhRiz","3072:cGhRizZ","3072:GhRizZ3","3072:hRizZ3a","3072:RizZ3ai","3072:izZ3aiO","3072:zZ3aiOc","3072:Z3aiOcB","3072:3aiOcBq","3072:aiOcBqG","3072:iOcBqGg","3072:OcBqGg1","3072:cBqGg1A","3072:BqGg1AS","3072:qGg1ASQ","3072:Gg1ASQR","3072:g1ASQRt","3072:1ASQRtJ","3072:ASQRtJP","3072:SQRtJPI","6144:TXECZpz","6144:XECZpz5","6144:ECZpz5w","6144:CZpz5wk","6144:Zpz5wki","6144:pz5wkic","6144:z5wkicG","6144:5wkicGh","6144:wkicGhR","6144:kicGhRi","6144:icGhRiz","6144:cGhRizZ","6144:GhRizZ3","6144:hRizZ3a","6144:RizZ3ai","6144:izZ3aiO","6144:zZ3aiOc","6144:Z3aiOcB","6144:3aiOcBq","6144:aiOcBqG","6144:iOcBqGg","6144:OcBqGg1","6144:cBqGg1A","6144:BqGg1AS","6144:qGg1ASQ","6144:Gg1ASQR","6144:g1ASQRt","6144:1ASQRtJ","6144:ASQRtJP","6144:SQRtJPI","3072:ECZpz5/","3072:CZpz5/M","3072:Zpz5/Mf","3072:pz5/MfC","3072:z5/MfC3","3072:5/MfC3R","3072:/MfC3RO","3072:MfC3ROc","3072:fC3ROcB","3072:C3ROcBf","3072:3ROcBfg","3072:ROcBfg1","3072:OcBfg1F","3072:cBfg1FO","3072:Bfg1FOJ","3072:fg1FOJQ"],"imphash":"Unknown"},"file_info":{"file_name":"Oct_Inv_424550_09102023.pdf","file_type":["pdf"],"file_type_id":"pdf","file_size":99651,"is_container_sample":false,"url_analysis":false},"submissions":{"first_seen":1696935624000,"last_seen":1696996222000,"last_multi_scan":1696996222000}},"detections":{"summary":{"verdict":"malicious","score":100,"tags":["phishing"]},"stats":{"av":{"malicious_count":5,"suspicious_count":0,"total_engines":28},"attributions":{"malware_families_count":1,"threat_actors_count":0,"campaigns_count":0,"threat_types_count":0,"cves_count":0},"mitre_attacks":{"total":10},"sandbox_signatures":{"informative_count":17,"suspicious_count":2,"malicious_count":2,"total":21},"rule_matches":{"yara_count":0,"sigma_count":0,"suricata_count":0}},"av_detections":{"engines":{"aegislab":{"name":"AegisLab","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"ahnlab":{"name":"AhnLab","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"antiy":{"name":"Antiy","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"avira":{"name":"Avira","success":true,"verdict":"malicious","threat_name":"TR/AVA.PhishingX.jainz","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"bitdefender":{"name":"Bitdefender","success":true,"verdict":"malicious","threat_name":"Trojan.GenericKD.69686408","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"clamav":{"name":"ClamAV","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"comodo":{"name":"Comodo","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"crowdstrike":{"name":"CrowdStrike","success":true,"verdict":"undetected","status":"clean","progress":100,"data_source":"CrowdStrike","permalink":"https://www.crowdstrike.com/en-us/platform/endpoint-security/"},"cylance":{"name":"Cylance","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"emsisoft":{"name":"Emsisoft","success":true,"verdict":"malicious","threat_name":"Trojan.GenericKD.69686408 (B)","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"eset":{"name":"ESET","success":true,"verdict":"malicious","threat_name":"PDF/TrojanDownloader.Agent.BDE trojan","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"filseclab":{"name":"Filseclab","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"huorong":{"name":"Huorong","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"k7":{"name":"K7","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"kaspersky":{"name":"Kaspersky","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"mcafee":{"name":"McAfee","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"nanoav":{"name":"NANOAV","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"netgate":{"name":"NETGATE","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"rocketcyber":{"name":"RocketCyber","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"sophos":{"name":"Sophos","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"tachyon":{"name":"TACHYON","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"trendmicro":{"name":"Trend Micro","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"trendmicrohousecall":{"name":"Trend Micro HouseCall","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"varist":{"name":"Varist","success":true,"verdict":"malicious","threat_name":"URL/Agent.KO1.gen!Eldorado","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"viritexplorer":{"name":"Vir.IT eXplorer","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"virusblokada":{"name":"VirusBlokAda","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"webrootsmd":{"name":"Webroot SMD","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"zillya":{"name":"Zillya!","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"}}},"rule_matches":{},"attributions":{"malware_families":[{"value":"Trojan.Generic","sources":[{"report_type":"quickscan","report_id":""}]}]},"mitre_attacks":[{"tactic":"Initial Access","technique":"Spearphishing Link","attack_id":"T1566.002","attack_id_wiki":"https://attack.mitre.org/techniques/T1566/002","identifiers":[{"type":"informative","value":"PDF file has an embedded URL"}],"sources":[{"report_type":"sandbox","report_id":"65261b7ee5f1769d47098781"}]},{"tactic":"Execution","technique":"JavaScript","attack_id":"T1059.007","attack_id_wiki":"https://attack.mitre.org/techniques/T1059/007","identifiers":[{"type":"informative","value":"References JavaScript(s)"}],"sources":[{"report_type":"sandbox","report_id":"65261b7ee5f1769d47098781"}]},{"tactic":"Defense Evasion","technique":"Masquerading","attack_id":"T1036","attack_id_wiki":"https://attack.mitre.org/techniques/T1036","identifiers":[{"type":"informative","value":"Drops files inside appdata directory"}],"sources":[{"report_type":"sandbox","report_id":"65261b7ee5f1769d47098781"}]},{"tactic":"Defense Evasion","technique":"Obfuscated Files or Information","attack_id":"T1027","attack_id_wiki":"https://attack.mitre.org/techniques/T1027","identifiers":[{"type":"informative","value":"Sample file has high entropy (likely encrypted/compressed content)"},{"type":"informative","value":"Shows ability to obfuscate file or information"},{"type":"informative","value":"Matched Compiler/Packer signature (DIE)"}],"sources":[{"report_type":"sandbox","report_id":"65261b7ee5f1769d47098781"}]},{"tactic":"Credential Access","technique":"Credentials from Password Stores","attack_id":"T1555","attack_id_wiki":"https://attack.mitre.org/techniques/T1555","identifiers":[{"type":"informative","value":"Contains string like password/secret"}],"sources":[{"report_type":"sandbox","report_id":"65261b7ee5f1769d47098781"}]},{"tactic":"Collection","technique":"Local Data Staging","attack_id":"T1074.001","attack_id_wiki":"https://attack.mitre.org/techniques/T1074/001","identifiers":[{"type":"informative","value":"Writes log files"}],"sources":[{"report_type":"sandbox","report_id":"65261b7ee5f1769d47098781"}]},{"tactic":"Collection","technique":"Archive via Library","attack_id":"T1560.002","attack_id_wiki":"https://attack.mitre.org/techniques/T1560/002","identifiers":[{"type":"informative","value":"Contains object with compressed stream data"}],"sources":[{"report_type":"sandbox","report_id":"65261b7ee5f1769d47098781"}]},{"tactic":"Command and Control","technique":"Encrypted Channel","attack_id":"T1573","attack_id_wiki":"https://attack.mitre.org/techniques/T1573","identifiers":[{"type":"malicious","value":"Making HTTPS connections using insecure TLS/SSL version"},{"type":"informative","value":"Making HTTPS connections using secure TLS/SSL version"},{"type":"informative","value":"Possibly tries to communicate over SSL connection (HTTPS)"}],"sources":[{"report_type":"sandbox","report_id":"65261b7ee5f1769d47098781"}]},{"tactic":"Command and Control","technique":"Application Layer Protocol","attack_id":"T1071","attack_id_wiki":"https://attack.mitre.org/techniques/T1071","identifiers":[{"type":"informative","value":"Found potential URL in binary/memory"}],"sources":[{"report_type":"sandbox","report_id":"65261b7ee5f1769d47098781"}]},{"tactic":"Command and Control","technique":"Ingress Tool Transfer","attack_id":"T1105","attack_id_wiki":"https://attack.mitre.org/techniques/T1105","identifiers":[{"type":"informative","value":"Contains ability to transfer files using SCP"},{"type":"informative","value":"Dropped files"},{"type":"informative","value":"Drops temp files"}],"sources":[{"report_type":"sandbox","report_id":"65261b7ee5f1769d47098781"}]}],"sandbox_signatures":[{"level":"informative","category":"Cryptographic Related","name":"Sample file has high entropy (likely encrypted/compressed content)","description":"Sample file \"sample.bin\" has high entropy 7.964593867891872","origin":"Binary File","mitre_attack_id":"T1027","relevance":1,"id":"binary-71","sources":[{"report_type":"sandbox","report_id":"65261b7ee5f1769d47098781"}]},{"level":"informative","category":"Cryptographic Related","name":"Shows ability to obfuscate file or information","description":"The analysis contains indicators for cyrpto or data obfuscation(base64/decrypt) which can hide information. Matched sigs: Sample file has high entropy (likely encrypted/compressed content)","origin":"Indicator Combinations","mitre_attack_id":"T1027","relevance":1,"id":"summary-28","sources":[{"report_type":"sandbox","report_id":"65261b7ee5f1769d47098781"}]},{"level":"informative","category":"General","name":"Contains object with compressed stream data","description":"$25","origin":"Static Parser","mitre_attack_id":"T1560.002","relevance":10,"id":"static-66","sources":[{"report_type":"sandbox","report_id":"65261b7ee5f1769d47098781"}]},{"level":"informative","category":"General","name":"Found a reference to a known community page","description":"Found string \"

\" (Indicator: \"linkedin.com\"; File: \"urlref_httpswww.freightquote.comterms-and-conditions\")\n Found string \"

Facebook

\" (Indicator: \"facebook.com\"; File: \"urlref_httpswww.freightquote.comterms-and-conditions\")\n Found string \"

Twitter

\" (Indicator: \"twitter\"; File: \"urlref_httpswww.freightquote.comterms-and-conditions\")\n Found string \"\" (Indicator: \"youtube\"; File: \"urlref_httpswww.freightquote.comterms-and-conditions\")","origin":"File/Memory","relevance":2,"id":"string-10","sources":[{"report_type":"sandbox","report_id":"65261b7ee5f1769d47098781"}]},{"level":"informative","category":"General","name":"Matched Compiler/Packer signature (DIE)","description":"\"Oct_Inv_424550_09102023\" was detected as \"PDF\" and name: \"Format\"\n \"Oct_Inv_424550_09102023\" was detected as \"plain text\" and name: \"Format\"","origin":"Static Parser","mitre_attack_id":"T1027","id":"static-157","sources":[{"report_type":"sandbox","report_id":"65261b7ee5f1769d47098781"}]},{"level":"informative","category":"General","name":"PDF contains only a single page","description":"Tag \"pages\" has a value of \"1\"","origin":"Static Parser","relevance":5,"id":"static-58","sources":[{"report_type":"sandbox","report_id":"65261b7ee5f1769d47098781"}]},{"level":"informative","category":"General","name":"PDF file has an embedded URL","description":"\"https://timegroom.com/annotate\" (Based on: \"Oct_Inv_424550_09102023\")\n \"https://www.freightquote.com/terms-and-conditions\" (Based on: \"Oct_Inv_424550_09102023\")\n \"Freightquote.com\" (Based on: \"Oct_Inv_424550_09102023\")\n \"freightquote.com\" (Based on: \"Oct_Inv_424550_09102023\")\n \"www.freightquote.com\" (Based on: \"Oct_Inv_424550_09102023\")","origin":"File/Memory","mitre_attack_id":"T1566.002","relevance":3,"id":"string-25","sources":[{"report_type":"sandbox","report_id":"65261b7ee5f1769d47098781"}]},{"level":"informative","category":"General","name":"References JavaScript(s)","description":"Found string \"