Static

static

1

Resubmissions

21/04/2026, 11:28

260421-nk52lagz8x

21/04/2026, 11:00

260421-m381jagv81

21/04/2026, 10:49

260421-mwvvbsc17j10

Sharing

Copy URL Twitter E-mail

General

  • Target
    C__Users_srosso_Downloads_Non confermato 130883.crdownload
  • Size 8KB
  • Sample260421-m381jagv81
  • SHA256 b9366aab8bc6181ff5f7533fac79cd6ce6c45c382d5124060049ae95e30ae809
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • C__Users_srosso_Downloads_Non confermato 130883.crdownload
    .eml 8KB
  • IT6593400823914_24908.zip
    .zip 4KB
  • IT6593400823914.html
    .html .js 20KB
  • email-plain-1.txt
    781B

C__Users_srosso_Downloads_Non confermato 130883.crdownload

  • SHA256 b9366aab8bc6181ff5f7533fac79cd6ce6c45c382d5124060049ae95e30ae809
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Date

Tue, 21 Apr 2026 03:10:41 +0200

Subject

=?utf-8?B?RmF0dHVyYSBpbiBhdHRlc2EgZGkgcGFnYW1lbnRvIOKAkyBjb211bmlj?= =?utf-8?B?YXppb25lIHVyZ2VudGU=?=

Content-Type

multipart/mixed; boundary="8a97de74fb9ab0b6852f66a8dc19f1088683"

Received

from smtps.pec.aruba.it (localhost [127.0.0.1]) by smtps.pec.aruba.it (Postfix) with ESMTP id 4g06jz4d95zlc for <[email protected]>; Tue, 21 Apr 2026 03:08:07 +0000 (UTC)

from shared-smtp-sh-0.shared-smtp-sh.rem-aruba-is1.svc.cluster.local (localhost [78.209.95.223]) by smtps.pec.aruba.it (Postfix) with ESMTPA id 4g06jv1vdczkW for <[email protected]>; Tue, 21 Apr 2026 03:08:00 +0000 (UTC)

from shared-smtp-dovecot-submission-wl5lv ([78.209.95.223]) by shared-smtp-sh-0.shared-smtp-sh.rem-aruba-is1.svc.cluster.local with ESMTPA id 7SMOEgTq5mnsfQMAj2vSHw:T2 (envelope-from <[email protected]>) for <[email protected]>; Tue, 21 Apr 2026 03:08:00 +0000

Message-Id

<[email protected]>