The fake pdf attached to the "PURCHASE ORDER 05-30-2023" email contains a link, from which you download a tgz file with a TAR, inside which there is an exe: the malware.
Syria, the SDF capture an Islamic State Emir between Deir Ezzor and Hasaka

The SDF capture an Islamic State Emir between Deir Ezzor and Hasaka. The man, arrested by HAT in cooperation with Inherent Resolve, was the head of a very active former ISIS cell in Shaddadi
New important arrest by the SDF between Deir Ezzor and Hasaka, as part of the campaign against the Islamic State. The Kurdish Special Forces (HAT), with the support of Inherent Resolve, carried out a raid on the village of Kharbat al-Tamr in the Shaddadi area. The assessment was the capture of an important IS commander, whose general information was not provided. This was in charge of a cell that carried out attacks in the quadrant both against the population and against the Kurdish forces, including with mines and improvised devices. During the operation, however, various documents and electronic devices were found, judged to be of great interest by intelligence. The raid is part of an offensive (still underway in the Syrian region) to dismantle the logistics and support cells for former ISIS terrorists, especially along the eastern bank of the Euphrates.