Overview

overview

4

Static

static

1

phish_aler....0.eml

windows10-2004-x64

1

phish_aler....0.eml

windows11-21h2-x64

4

email-html-2.html

windows10-2004-x64

4

email-html-2.html

windows11-21h2-x64

4

email-plain-1.txt

windows10-2004-x64

1

email-plain-1.txt

windows11-21h2-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    phish_alert_sp2_2.0.0.0.eml
  • Size 57KB
  • Sample260605-e3qj7aaz5x
  • SHA256 de0a6868425b60af005d210a7123a815e6045baa2202e60ddcc64c5eb0650f26
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • phish_alert_sp2_2.0.0.0.eml
    .eml 57KB
  • email-html-2.txt
    .html 37KB
  • email-plain-1.txt
    3KB

phish_alert_sp2_2.0.0.0.eml

  • SHA256 de0a6868425b60af005d210a7123a815e6045baa2202e60ddcc64c5eb0650f26
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Date

Fri, 5 Jun 2026 09:31:09 +0930

Subject

Service Update: Platform Performance Issue (5 June 2026)

Content-Type

multipart/alternative; boundary="----=_NextPart_000_0000_01DCF4D2.47F0B8A0"

Received

from SY6PR01CA0041.ausprd01.prod.outlook.com (2603:10c6:10:e9::10) by SY7P282MB5105.AUSP282.PROD.OUTLOOK.COM (2603:10c6:10:2ae::15) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.92.8; Fri, 5 Jun 2026 00:04:57 +0000

from SY7P282MB5105.AUSP282.PROD.OUTLOOK.COM (2603:10c6:10:2ae::15) by SY9P282MB5984.AUSP282.PROD.OUTLOOK.COM with HTTPS; Fri, 5 Jun 2026 00:05:02 +0000

from jw.d.sender-sib.com (77.32.148.101) by SY2PEPF00004FF4.mail.protection.outlook.com (10.167.241.6) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.92.5 via Frontend Transport; Fri, 5 Jun 2026 00:04:55 +0000

from SY2PEPF00004FF4.ausprd01.prod.outlook.com (2603:10c6:10:e9:cafe::5e) by SY6PR01CA0041.outlook.office365.com (2603:10c6:10:e9::10) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.92.8 via Frontend Transport; Fri, 5 Jun 2026 00:04:57 +0000

Received-Spf

Pass (protection.outlook.com: domain of jw.d.sender-sib.com designates 77.32.148.101 as permitted sender) receiver=protection.outlook.com; client-ip=77.32.148.101; helo=jw.d.sender-sib.com; pr=C

X-Mailer

Sendinblue

Message-Id

<[email protected]>

Extracted URLs

  • file https://aka.ms/LearnAboutSenderIdentification

  • file https://b88yi.img.ag.d.sendibm3.com/im/sh/Dgu9sz4PC3jL.png?u=2BpAyz2gMiWnccbixkxs1oguNJl4RKOgrO

  • file https://b88yi.r.ag.d.sendibm3.com/mk/cl/f/sh/7nVU1aA2nfsTT5yFyVWn3TrNsusITrS/h-gLJi8q_9mP

  • file https://b88yi.r.ag.d.sendibm3.com/mk/cl/f/sh/7nVU1aA2nfuMScTYx4lF5qBC3HN5Dny/QX2Nxp5oXqy0

  • file https://b88yi.r.ag.d.sendibm3.com/mk/cl/f/sh/7nVU1aA2nfwFS8yrvdzh8CV0DdrrxkU/8gSne6-2DnMw

  • file https://b88yi.r.ag.d.sendibm3.com/mk/cl/f/sh/7nVU1aA2nfy8RfUAuDE9AYooO0Mehh0/ZVbVwtU2xNl6

  • file https://b88yi.r.ag.d.sendibm3.com/mk/cl/f/sh/7nVU1aA2ng01RBzTsmSbCv8cYMrRRdW/nVO8wArmsqiF

  • file https://b88yi.r.ag.d.sendibm3.com/mk/mr/sh/7nVTPdZCTJDXPP7wvHoRlt9E4HCLYiE/y3jiJMwMxr2m

  • file https://b88yi.r.ag.d.sendibm3.com/mk/op/sh/7nVTPddU8lzHnxKB3QRMe5ykX96URwk/AIx699E35Egp

  • Show all