Overview

overview

4

Static

static

1

Message.eml

windows10-2004-x64

1

Message.eml

windows11-21h2-x64

1

AKGK7SAP1XDA.bmp

windows10-2004-x64

1

AKGK7SAP1XDA.bmp

windows11-21h2-x64

email-html-2.html

windows10-2004-x64

4

email-html-2.html

windows11-21h2-x64

4

email-plain-1.txt

windows10-2004-x64

1

email-plain-1.txt

windows11-21h2-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    Message.eml
  • Size 6.2MB
  • Sample260604-wp9jkscs5p
  • SHA256 0d38f49b945cb71c11fe61327b85d8d7e7e836edc7ab1b3ee7a18f7f8f2b0989
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • Message.eml
    .eml 6.2MB
  • AKGK7SAP1XDA.bmp
    4.5MB
  • email-html-2.txt
    .html 917B
  • email-plain-1.txt
    447B

Message.eml

  • SHA256 0d38f49b945cb71c11fe61327b85d8d7e7e836edc7ab1b3ee7a18f7f8f2b0989
  • MD5 SHA1 SHA512 SSDEEP TLSH
Password
H@rper2028

Email Headers

In-Reply-To

PH0PR03MB6978A6F1DE66536216298750EC002@PH0PR03MB6978.namprd03.prod.outlook.com

Date

Wed, 3 Jun 2026 22:09:22 +0000

Subject

FW: Ryan Chang AKGK7SAP1XDA

Content-Type

multipart/related; boundary="_004_DS0PR14MB7527CECE6652FDC970EEB18588132DS0PR14MB7527namp_"; type="multipart/alternative"

Received

from DS0PR14MB7527.namprd14.prod.outlook.com (2603:10b6:8:1b6::22) by IA1PR14MB7822.namprd14.prod.outlook.com (2603:10b6:208:5d6::24) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.92.7; Wed, 3 Jun 2026 22:09:22 +0000

from DS0PR14MB7527.namprd14.prod.outlook.com ([fe80::43f1:517b:4d9:b566]) by DS0PR14MB7527.namprd14.prod.outlook.com ([fe80::43f1:517b:4d9:b566%6]) with mapi id 15.21.0092.006; Wed, 3 Jun 2026 22:09:22 +0000

Message-Id

<DS0PR14MB7527CECE6652FDC970EEB18588132@DS0PR14MB7527.namprd14.prod.outlook.com>