General

  • Target
    Message.eml
  • Size 92KB
  • Sample260620-fee9zsev2t
  • SHA256 be29b315dd0131c296deda0108a6827962fa8398a80bbfa7d43747688589bb0f
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • Message.eml
    .eml 92KB
  • email-html-2.txt
    .html 65KB
  • email-plain-1.txt
    4KB

Message.eml

  • SHA256 be29b315dd0131c296deda0108a6827962fa8398a80bbfa7d43747688589bb0f
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

[email protected]

Date

Fri, 19 Jun 2026 18:51:26 +0000

Subject

Welcome to Link

Content-Type

multipart/alternative; boundary="_----iGlORWog0ZETHzP+TumrdQ===_5E/37-20763-EAF853A6"

Received

from BN9PR03CA0280.namprd03.prod.outlook.com (2603:10b6:408:f5::15) by DM4PR18MB5830.namprd18.prod.outlook.com (2603:10b6:8:42::17) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.139.11; Fri, 19 Jun 2026 18:51:28 +0000

from BN2PEPF000055DC.namprd21.prod.outlook.com (2603:10b6:408:f5:cafe::9c) by BN9PR03CA0280.outlook.office365.com (2603:10b6:408:f5::15) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.139.13 via Frontend Transport; Fri, 19 Jun 2026 18:51:28 +0000

from zifg3gwf.e.link.com (137.22.235.79) by BN2PEPF000055DC.mail.protection.outlook.com (10.167.245.6) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.181.0 via Frontend Transport; Fri, 19 Jun 2026 18:51:28 +0000

from [10.90.12.63] ([10.90.12.63]) by i-0ca98205d5d7f3c4f.mta1vrest.sd.prd.sparkpost (ecelerity 5.2.0.76080 r(msys-ecelerity:tags/5.2.0.40)) with REST id DE/37-20763-EAF853A6; Fri, 19 Jun 2026 18:51:27 +0000

Received-Spf

Pass (protection.outlook.com: domain of e.link.com designates 137.22.235.79 as permitted sender) receiver=protection.outlook.com; client-ip=137.22.235.79; helo=zifg3gwf.e.link.com; pr=E

Message-Id

<DE.37.20763.EAF853A6@i-0ca98205d5d7f3c4f.mta1vrest.sd.prd.sparkpost>

Extracted URLs

  • file https://clicks.e.link.com/f/a/2L33p64TNDIFL16DscHoSg~~/AAQRxRA~/tJv_sqZoyWmYsZUof4BSGLDRVQUl0qvc4wPveDtrqEiw-oBSwQoEWmsID7TuHTCSkVJWZosf7gmM3g1wNL4z9XJsXHC0YfP0elBNAhMQ4GtZTLbrL3rCV-vv6g--bQq7fGJizrClUOw7KJT0lyZWglXCzP6H_tqJL2IK_bsvLYclTIjxUc4dAKeO3dQiaTSgWJYV6kT2GpFrjigtfYOvfg~~

  • file https://clicks.e.link.com/f/a/9poXKiAOMXce2qXhL5Az0w~~/AAQRxRA~/4jOs-vGI25YbsFogEUqQrapzB4fPyHGIlGG4OsMOuOgsxpkfJroUqUNDA4AezzHupWMDKs-p5Vfoqwzr5RDqKuJ2EwQ9SArVd31D22fGLzWcVOld-_h92ms62LI-80Kk_E9GX6RtxFTCk7YRZYEmxQDv-u9FYGJIugoqgSg71ad8weMP2qoQewh72PIqPeM-mmzc0xhbVGERp7gUnlRTvA~~

  • file https://clicks.e.link.com/f/a/OXk1CQCcDkCxo-e_Tr666g~~/AAQRxRA~/4jOs-vGI25YbsFogEUqQrapzB4fPyHGIlGG4OsMOuOgsxpkfJroUqUNDA4AezzHupWMDKs-p5Vfoqwzr5RDqKuJ2EwQ9SArVd31D22fGLzVjGUMNrY-9RbvPBeZ2kK0ZRuJJqxs5l7IaC5M0AYc4mRp_AvqdlKSm5Fg7rwPCIbt2vnmxM6_VfSBp2s2pLnMp3fZXztWcFf-Y2daufT91DA~~

  • file https://clicks.e.link.com/f/a/SozyJHAtM_8vujDvOPYaDw~~/AAQRxRA~/RQkkdVFgfhc0nAa2zVOg2HMDLCiNrS140goLZoYkZ-_Gx28TqNlguX1sQgiQnKYVdG8xfirRAVvvGLSP0SkObRNMlIGinIljzjvmDTkA0oe_mTFj1kSey5M96T3o0zyQw42mdk93TeEPwhau8TJctsN69RQxqQ9LMKs4FEn5NGQU41IAGywcjeXpxNDs0Q4PfyMdcOqPQVVUpgFktJbva1zSoy82A8opihfIwyAf6Bg~

  • file https://clicks.e.link.com/f/a/nEqMuMQcm7061uaX0QnFVA~~/AAQRxRA~/niP5b06ya-9qgSOPWgjLsDo75buO5UibvJ_PAeFORAPsRq49w-aAsM44r5EUHf4ZSpA5YXHJVun8J0ZSNR7RQfOD9MAUabDBYl4VlVRDtOIkGmo-x2SDRLt6nfbyYJaEAkwyL9V6cA6LxPkifedgiKsIPFGcKCX_IH-8aGuCpHYemDyT2It5a-3BfrYQd_DT5ekBS5MM-TyrnElVzCnDPprgd2jkvWiYCTPhq5tPULwlGPvsGxnx5L6Q2h0ckLaMveSTu7zuFss6Ro4azJ7hcH5mpZQSoUcsIkI-aPAUr_QLSUelHuVPN135EzM0mvmW5VboKnddrN8d-qAW5El3_IoRzLEh7rqUO-tmESaDtS4y5q0DnHgd8yAj_LjZibdcC4EFjmt95Qm_dSl8AMGncs7POnz5T1iaXD_S7YGN9dnhExSK1bXxz5ijaO3oQ4fzRFMKCx6icr72AIf54mke8wH9-aNK_zWpWMKVFYssB_U3EFgGc4Ek0OPbsdVcSarL4702lhHr2QqhBGakXb-NaPzhJU53jzPWkROm5lrZUWnmSgDq3awxjYLk1BnzqfCHGHlBXbA0vlJu7G4FR2EJ1a5vKuiLpWM6Tn060Ir8esbysHeTk4twtprDRxV5EgypXULcyig-CUs-dleI8sMJtjC3TRqbWcUKdfRBJ1bCmCWXiObXOaaYRzU_BjgEnEINwzVAvlqAO1z7E8spIOqdKUadTswWmzfACEQgORSH6akjDYsm1iwlUtkDqbaUK3IGC52U7g_HsNd9ayJVGrN_gmtIbguVGN0PXbuahFZAf0w~