QuarantineMessage[.]zip

General

Target
QuarantineMessage.zip
Size 145KB
Sample260623-hdhd3abs4y
SHA256 f96c13720a25e5f1ca329bcae210301cba9a4fc4cf2aa3f07c13056805d92e81
MD5 f3d48b9d853c298413f853917a88590b
SHA1 23dcda4a35694c5acc7c3740e0e215214b738343
SHA512 1a41075ff6f03f7a377d1b3df03d0882e3ad9b8adeebb98022a256a832bea34580a230688dcaa878632e0febb2ce31932f34870677b8d2cf4d92226ddbbe5987
SSDEEP 3072:rf8s2Gltp7DKhEkcVjWd9EmZGHec5UmQ4nmW1WR4l5WFOBx1CjQ:r0s2GlOrca9EmZGHeDT4nmGb
TLSH
T10BE31215D86E2618DE122D0C24F672F28417A2978687C13FBDA6A63DCBE1FBDC415D38
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

QuarantineMessage.zip

.zip 145KB
bdd0d503-387c-4443-9d0a-08ded054a26b/026b2770-284f-3aa9-b36b-9fa12f955f9e.eml

.eml 196KB
INV-Melia Hotels_98094217.pdf

.pdf 136KB
email-plain-1.txt

734B

QuarantineMessage.zip

SHA256 f96c13720a25e5f1ca329bcae210301cba9a4fc4cf2aa3f07c13056805d92e81
MD5 f3d48b9d853c298413f853917a88590b
SHA1 23dcda4a35694c5acc7c3740e0e215214b738343
SHA512 1a41075ff6f03f7a377d1b3df03d0882e3ad9b8adeebb98022a256a832bea34580a230688dcaa878632e0febb2ce31932f34870677b8d2cf4d92226ddbbe5987
SSDEEP 3072:rf8s2Gltp7DKhEkcVjWd9EmZGHec5UmQ4nmW1WR4l5WFOBx1CjQ:r0s2GlOrca9EmZGHeDT4nmGb
TLSH
T10BE31215D86E2618DE122D0C24F672F28417A2978687C13FBDA6A63DCBE1FBDC415D38
MD5 SHA1 SHA512 SSDEEP TLSH

Password

123

bdd0d503-387c-4443-9d0a-08ded054a26b/026b2770-284f-3aa9-b36b-9fa12f955f9e.eml

SHA256 56c385d342165b8672737eef07e27411372f4453621e9c0be0ec06bfc05fdc94
MD5 9a0eed9d4dd866dfa5219252a7e58d86
SHA1 8f2c9a75ebf21a8779eba41d2344be6fe266fb88
SHA512 57074d637fc143905e80141919e518a0f030506f34831988047941926dc31c8f6f4ae18ddeebe5ce809d53f7173377da3ead24994fdfc878496a3b795a35e27e
SSDEEP 6144:J7iVwjI3aAIecSRZEVi6EHbDvQtUWzJ/JMt:BW3UeRZmi6EHvQtrzJhm
TLSH
T1F7141226AF2924D2830006877F02BC5953569D37B99337C812A5C7F212FBDA5EA14DAF
MD5 SHA1 SHA512 SSDEEP TLSH

Password

123

Email Headers

To

[email protected]

From

[email protected]

Reply-To

[email protected]

Return-Path

010e019eef2c1076-c3f1f41d-fcbe-4837-a574-b5b7e449bb4f-000000@ap-southeast-1.amazonses.com

Date

Mon, 22 Jun 2026 11:51:42 +0000

Subject

=?utf-8?q?Enterprise_Strategic_Capability_Integration_for_Long-Horizon_Value?= =?utf-8?q?_Realization=2E?=

Content-Type

multipart/mixed; boundary="===============4550452105107278685=="

Received

from DB4PR03MB8562.eurprd03.prod.outlook.com (2603:10a6:10:38e::16) by PA4PR03MB6879.eurprd03.prod.outlook.com with HTTPS; Mon, 22 Jun 2026 11:53:19 +0000

from DUZPR01CA0186.eurprd01.prod.exchangelabs.com (2603:10a6:10:4b3::15) by DB4PR03MB8562.eurprd03.prod.outlook.com (2603:10a6:10:38e::16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.139.19; Mon, 22 Jun 2026 11:51:45 +0000

from DB5PEPF00014B88.eurprd02.prod.outlook.com (2603:10a6:10:4b3:cafe::60) by DUZPR01CA0186.outlook.office365.com (2603:10a6:10:4b3::15) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.139.14 via Frontend Transport; Mon, 22 Jun 2026 11:51:45 +0000

from e232-2.smtp-out.ap-southeast-1.amazonses.com (23.251.232.2) by DB5PEPF00014B88.mail.protection.outlook.com (10.167.8.196) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.159.10 via Frontend Transport; Mon, 22 Jun 2026 11:51:44 +0000

Received-Spf

Pass (protection.outlook.com: domain of ap-southeast-1.amazonses.com designates 23.251.232.2 as permitted sender) receiver=protection.outlook.com; client-ip=23.251.232.2; helo=e232-2.smtp-out.ap-southeast-1.amazonses.com; pr=C

Message-Id

<010e019eef2c1076-c3f1f41d-fcbe-4837-a574-b5b7e449bb4f-000000@ap-southeast-1.amazonses.com>

Extracted URLs

file https://aka.ms/LearnAboutSenderIdentification

Sharing

General

Malware Config

Signatures

File Explorer

QuarantineMessage.zip

bdd0d503-387c-4443-9d0a-08ded054a26b/026b2770-284f-3aa9-b36b-9fa12f955f9e.eml

Email Headers

Extracted URLs

INV-Melia Hotels_98094217.pdf

email-plain-1.txt