General

  • Target

    http://Received: from DM4PR05MB9560.namprd05.prod.outlook.com (2603:10b6:8:104::16) by PH0PR05MB8781.namprd05.prod.outlook.com with HTTPS; Wed, 12 Jun 2024 10:56:20 +0000 Received: from BYAPR08CA0056.namprd08.prod.outlook.com (2603:10b6:a03:117::33) by DM4PR05MB9560.namprd05.prod.outlook.com (2603:10b6:8:104::16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7677.19; Wed, 12 Jun 2024 10:56:18 +0000 Received: from CO1PEPF000042AC.namprd03.prod.outlook.com (2603:10b6:a03:117:cafe::46) by BYAPR08CA0056.outlook.office365.com (2603:10b6:a03:117::33) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7677.17 via Frontend Transport; Wed, 12 Jun 2024 10:56:18 +0000 Received: from inpost.tmes.trendmicro.eu (18.185.115.103) by CO1PEPF000042AC.mail.protection.outlook.com (10.167.243.41) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.20.7677.15 via Frontend Transport; Wed, 12 Jun 2024 10:56:17 +0000 Received: from 46.248.166.235_.trendmicro.com (unknown [172.21.197.65]) by inpost.tmes.trendmicro.eu (Postfix) with SMTP id AA78810000306 for <[email protected]>; Wed, 12 Jun 2024 10:56:15 +0000 (UTC) Received: from mail.itprofessional.info (unknown [46.248.166.235]) by inpre01.tmes.trendmicro.eu (Trend Micro Email Security) with ESMTPS id 846DE100016FE for <[email protected]>; Wed, 12 Jun 2024 10:55:18 +0000 (UTC) Received: from 213-241-5-18.static.ip.netia.com.pl ([213.241.5.18] helo=malgorzatabed03.local) by presscom2.serweryiq.pl with esmtpa (Exim 4.96.1-7-g79877b70e) (envelope-from <[email protected]>) id 1sHLdO-008Xpf-04 for [email protected]; Wed, 12 Jun 2024 12:55:18 +0200 Authentication-Results: spf=pass (sender IP is 46.248.166.235) smtp.mailfrom=itprofessional.info; dkim=fail (body hash did not verify) header.d=itprofessional.info;dmarc=pass action=none header.from=itprofessional.info;compauth=pass reason=100 Received-Spf: Pass (protection.outlook.com: domain of itprofessional.info designates 46.248.166.235 as permitted sender) receiver=protection.outlook.com; client-ip=46.248.166.235; helo=mail.itprofessional.info; pr=C X-Tm-Mail-Received-Time: 1718189718.541000 X-Tm-Mail-Uuid: 5aa658f8-6209-4ace-bc96-4d3923a099fc Dkim-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=itprofessional.info; s=x; h=Content-Type:MIME-Version:Date:Subject:To:From: Message-ID:Sender:Reply-To:Cc:Content-Transfer-Encoding:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe: List-Subscribe:List-Post:List-Owner:List-Archive; bh=PeZG/aIPrQxZc3GoIJFs6o/rWWHOhZZF0tMsyTOCduk=; b=Bp55NZnqxVJj4b6TbcvXAJT7bD MsKzM/LXdHfc68u0At8aB7wzIfjErk2wogw0ZmPdzkaz+NQPqzb7YUflBe8Y8OYRK7L6LUA6XG4d3 RCYJC5V/CQ0QDCeSUuz/jTfWneszoSD21iK++nH40GNI4r0k1jxIYBr2AdMs62TmGauDQn2/J90bG G0l8kjwKuyLlIf0T2yaK/q37n+yjqOki4Dbz0uNPMeKal7rBFcSr/LUP3ZGQxQ3WCPwvWGvo9gyvf S226LQy2jMZcNi7DU0hsAwz0L37Vy8abFQ1AQpLK7jWgXfv+QQD9Fqp62i8WYnKFomHZT7Vp6MMYE MVdGjxRQ==; Message-Id: <[email protected]> From: IT Professional <[email protected]> To: Wawzh Info <[email protected]> Subject: =?UTF-8?B?Tm93ZSByb3pwb3J6xIVkemVuaWUgZUlEQVMgMiAtIHdkcm/FvGVu?= =?UTF-8?B?aWUsIG5vd2UgcmFteSBpZGVudHlmaWthY2ppIGVsZWt0cm9uaWN6?= =?UTF-8?B?bmVqIGkgcmVhbGl6YWNqaSB1c8WCdWcgb25saW5l?= Date: Wed, 12 Jun 2024 12:55:17 +0200 MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="----sinikael-?=_1-17181900196380.1807145260227893" X-Authenticated-Id: [email protected] X-Tm-Received-Spf: Pass (domain of [email protected] designates 46.248.166.235 as permitted sender) client-ip=46.248.166.235; [email protected]; helo=mail.itprofessional.info X-Tm-Authentication-Results: spf=pass (sender IP address: 46.248.166.235) smtp.mailfrom=itprofessional.info; dkim=pass (signatures verified) header.d=itprofessional.info; dmarc=pass action=none header.from=itprofessional.info; arc=none X-Tm-As-Ers: 46.248.166.235-127.9.0.1 X-Tm-Addin-Auth: z6bBycJVXHXiyUOWR4nBmW+U6IJ7ZA8C659kdZCmAf87LDjSZDT8XwRMN+3 DB4mX53UfyAavCWnh85pCHwCmiElOF4J63FUD4ri98x4WX7vCNQMnFwwFXh9E3rJimyiJUE6BBd juLDUj2Gh9OlZQNNP4JgOH/A+bw+U3fisT5JYeP+c0BStA0B9hsFY0IS8i41NuDxU3mlFeEP4F5 5ickrTnSG4TOAtiu/rvOA2l2pFBIU1rMwJaajW7eg/I6eUB/JJdgXQr2MmcTeD9MbjB1sDr6iLO KE+eQvxD12O0Kl8=.rSTL/ZBBxg77nDF5Px1LIODo/zd4r+yJVuCnYbiWQY5SgmjUdAaYjNm75K cz5yIXUKKEO4C8m5WqXcXAz/RI9qirfIfSiR/rZiFkNqV6RNb18HAoy4Sc5GU9/rFKg87TmBohT PWdPkncByhHQLEQTqoBAyie6Uhci52MlpMh7ReQ6lHApLsPB+lYS70K30fYhm6nRO8E5cpVXFmB sIm5j/mtYOrYUzt0/N5gtJW6KW8VkEk3klhyzThdmTYYRFqsfYLIc2w3Hwp+Sbm6NETTXFp5sEO zTzCXYrMaYa36xzyA8s6VmuB291TXhLU00fbNN48Bs4c19qBG9ej6si5I6w== X-Tm-Addin-Productcode: EMS X-Tm-As-Smtp: 1.0 bWFpbC5pdHByb2Zlc3Npb25hbC5pbmZv Yml1cm9AaXRwcm9mZXNzaW9uYWwuaW5mbw== X-Tm-As-Urlratinginfo: 71-90-=?us-ascii?B?aHR0cDovL3d3dy5pdHByb2Zlc3Npb25hbC 5pbmZvL2luZm8vMjAyNF8wNi96YXByb3N6ZW5pZV8yMDI0LTA2LTI4X29ubGluZS5wZGY= X-Tm-As-Url-Rewrite: 2/2 X-Tmase-Version: StarCloud-1.3-9.1.1023-28448.007 X-Tmase-Result: 10--9.439300-10.000000 X-Tmase-Matchedrid: ANCKU1siElgRgbRey38NSv8RhR58/UuChYL84EhpzUJNHmb5lSZeLgqn PeBhr7S4YRMVYNsujfLfn51h82DPP1/usZ6tm4dO2nb1Q+fUORHhI5qjZ5ERup0pFSj/nHJtyGy aQXOvRx7j4Opi05G21U69uA5BeruAUOOsc/slMqNEKZlqWQag3kBTMqwkrer1GT6vUXq3naRKbG AWfebwywWwJG7dcBXTma5Qz6w5yRfsAifmHHXgmvCP2OuLlfOuNUZvuFbFzyd0lSyV8VXy1SNpy jdKcD8BzIPvcxTl2LWF7k8hNzXSwqHXNr5r9NVcJVyF7tc3s1R5PlKf5re2AJt0vIROpR5tcsNP BsbN2tjQGd/IIMoRuVnWnGAOhQYvb/g7FkR+c4W6/hF/5lN6QNcfI3LTHAisa1MlcefkD6XdNk7 rzzG2LpWpJs6rePACxukqYxwthz/03S+pRGuBNh9qYvs3c+DGvinYTipIbkH3GngXlkIimzmoMB krmuf/mCYM4MaoFU97wQPQv9XohUiWqV2CUL6TiXZSy4ho13oNqDAKdxNPqXZP9VyVNpWBzbnWf zFQAD1WPx536TZMQGm0BZNSvVpxlJH+ao6/CuHlqHORe3O9OuZfUBfZlGbWvSMyZcYV09ya/zMd XqTSlgheXp9J+h45Ru9ytDTzwyD07TAOjfJpF8l/Nn7wR5Yb X-Tmase-Snap-Result: 1.821001.0001-0-1-22:0,28:1,33:0,34:0-0 X-Tmase-Xgencloud: 3ac10f60-6e22-4d5d-a8c0-731d248c53cb-0-0-200-0 X-Tm-Deliver-Signature: BC1DAB983099F18543B9E0BE770E4039 Return-Path: [email protected] X-Ms-Exchange-Organization-Expirationstarttime: 12 Jun 2024 10:56:17.4767 (UTC) X-Ms-Exchange-Organization-Expirationstarttimereason: OriginalSubmit X-Ms-Exchange-Organization-Expirationinterval: 1:00:00:00.0000000 X-Ms-Exchange-Organization-Expirationintervalreason: OriginalSubmit X-Ms-Exchange-Organization-Network-Message-Id: 16d21ffa-0b51-44d3-1e6a-08dc8ace4924 X-Eopattributedmessage: 0 X-Eoptenantattributedmessage: 1e69e311-af1f-4162-b24e-16bb3f962d34:0 X-Ms-Exchange-Organization-Messagedirectionality: Incoming X-Ms-Exchange-Skiplistedinternetsender: ip=[46.248.166.235];domain=mail.itprofessional.info X-Ms-Exchange-Externaloriginalinternetsender: ip=[46.248.166.235];domain=mail.itprofessional.info X-Ms-Publictraffictype: Email X-Ms-Traffictypediagnostic: CO1PEPF000042AC:EE_|DM4PR05MB9560:EE_|PH0PR05MB8781:EE_ X-Ms-Exchange-Organization-Authsource: CO1PEPF000042AC.namprd03.prod.outlook.com X-Ms-Exchange-Organization-Authas: Anonymous X-Ms-Office365-Filtering-Correlation-Id: 16d21ffa-0b51-44d3-1e6a-08dc8ace4924 X-Ms-Exchange-Organization-Scl: 1 X-Microsoft-Antispam: BCL:0;ARA:13230032|12012899004|2092899004|5062899004|3072899004|82310400018; X-Forefront-Antispam-Report: CIP:18.185.115.103;CTRY:PL;LANG:pl;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:mail.itprofessional.info;PTR:235.presscom2.serweryiq.pl;CAT:NONE;SFS:(13230032)(12012899004)(2092899004)(5062899004)(3072899004)(82310400018);DIR:INB; X-Ms-Exchange-Crosstenant-Originalarrivaltime: 12 Jun 2024 10:56:17.1330 (UTC) X-Ms-Exchange-Crosstenant-Network-Message-Id: 16d21ffa-0b51-44d3-1e6a-08dc8ace4924 X-Ms-Exchange-Crosstenant-Id: 1e69e311-af1f-4162-b24e-16bb3f962d34 X-Ms-Exchange-Crosstenant-Authsource: CO1PEPF000042AC.namprd03.prod.outlook.com X-Ms-Exchange-Crosstenant-Authas: Anonymous X-Ms-Exchange-Crosstenant-Fromentityheader: Internet X-Ms-Exchange-Transport-Crosstenantheadersstamped: DM4PR05MB9560 X-Ms-Exchange-Transport-Endtoendlatency: 00:00:03.2953200 X-Ms-Exchange-Processed-By-Bccfoldering: 15.20.7677.008 X-Microsoft-Antispam-Mailbox-Delivery: ucf:0;jmr:0;auth:0;dest:I;ENG:(910001)(944506478)(944626604)(920097)(930097)(140003); X-Microsoft-Antispam-Message-Info: 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 Content-Transfer-Encoding: 7bit

Score
1/10

Malware Config

Signatures

Files