Overview

overview

3

Static

static

1

Message 2.eml

windows10-2004-x64

1

email-html-2.html

windows10-2004-x64

3

email-plain-1.txt

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    Message 2.eml
  • Size 36KB
  • Sample260523-sn4edset5t
  • SHA256 8d4f5eddb4d33e0546889f0ed108e45d8b1a23ccb4575ca449f839a2c3f6e401
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • Message 2.eml
    .eml 36KB
  • email-html-2.txt
    .html 16KB
  • email-plain-1.txt
    1KB

Message 2.eml

  • SHA256 8d4f5eddb4d33e0546889f0ed108e45d8b1a23ccb4575ca449f839a2c3f6e401
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

In-Reply-To

DU4PR07MB113327213D4F35F84B7D0F32CF10C2@DU4PR07MB11332.eurprd07.prod.outlook.com

Return-Path

[email protected]

Date

Sat, 23 May 2026 12:01:22 +0000

Subject

=?Windows-1252?Q?R:_Nous_confirmons_votre_achat_de_1517,48=80?=

Content-Type

multipart/alternative; boundary="_000_DU4PR07MB113328A13C2A4E8BDDEDE672AF10C2DU4PR07MB11332eu_"

Received

from CWLP123CA0200.GBRP123.PROD.OUTLOOK.COM (2603:10a6:400:19c::11) by AMBPR10MB9756.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:763::17) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.48.17; Sat, 23 May 2026 12:01:27 +0000

from AMS1EPF00000093.eurprd05.prod.outlook.com (2603:10a6:400:19c:cafe::37) by CWLP123CA0200.outlook.office365.com (2603:10a6:400:19c::11) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.48.18 via Frontend Transport; Sat, 23 May 2026 12:01:27 +0000

from mx08-00271601.pphosted.com (185.132.182.208) by AMS1EPF00000093.mail.protection.outlook.com (10.167.242.90) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.71.7 via Frontend Transport; Sat, 23 May 2026 12:01:27 +0000

from pps.filterd (m0107398.ppops.net [127.0.0.1]) by mx08-00271601.pphosted.com (8.18.1.11/8.18.1.11) with ESMTP id 64N4u5XM1969318 for <[email protected]>; Sat, 23 May 2026 14:01:26 +0200

from pa4pr04cu001.outbound.protection.outlook.com (mail-francecentralazon11023082.outbound.protection.outlook.com [40.107.162.82]) by mx08-00271601.pphosted.com (PPS) with ESMTPS id 4eb27d8tdn-1 (version=TLSv1.3 cipher=TLS_AES_256_GCM_SHA384 bits=256 verify=NOT) for <[email protected]>; Sat, 23 May 2026 14:01:26 +0200 (MEST)

from DU4PR07MB11332.eurprd07.prod.outlook.com (2603:10a6:10:624::8) by AMBPR07MB12325.eurprd07.prod.outlook.com (2603:10a6:20b:75e::20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.48.17; Sat, 23 May 2026 12:01:22 +0000

from DU4PR07MB11332.eurprd07.prod.outlook.com ([fe80::83e4:d41b:8d28:6d27]) by DU4PR07MB11332.eurprd07.prod.outlook.com ([fe80::83e4:d41b:8d28:6d27%4]) with mapi id 15.21.0048.013; Sat, 23 May 2026 12:01:22 +0000

Received-Spf

Fail (protection.outlook.com: domain of cnr.it does not designate 185.132.182.208 as permitted sender) receiver=protection.outlook.com; client-ip=185.132.182.208; helo=mx08-00271601.pphosted.com;

Message-Id

<DU4PR07MB113328A13C2A4E8BDDEDE672AF10C2@DU4PR07MB11332.eurprd07.prod.outlook.com>

Extracted URLs

  • file https://aka.ms/LearnAboutSenderIdentification