Overview

overview

4

Static

static

1

phish_aler....0.eml

windows10-2004-x64

1

phish_aler....0.eml

windows11-ltsc_2024-x64

1

email-html-1.html

windows10-2004-x64

3

email-html-1.html

windows11-ltsc_2024-x64

4

Sharing

Copy URL Twitter E-mail

General

  • Target
    phish_alert_sp2_2.0.0.0.eml
  • Size 37KB
  • Sample260623-vdzdsset3p
  • SHA256 f1aeb2862324564bf17885f3ddd771a2272a4731bdc11219160060495cba5d61
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • phish_alert_sp2_2.0.0.0.eml
    .eml 37KB
  • email-html-1.txt
    .html 24KB

phish_alert_sp2_2.0.0.0.eml

  • SHA256 f1aeb2862324564bf17885f3ddd771a2272a4731bdc11219160060495cba5d61
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

<>

Date

Mon, 22 Jun 2026 23:41:43 -0700

Subject

=?UTF-8?B?W0VYVEVSTkFMXSBOZXcgcHJpdmFjeSBzZXR0aW5ncyBmb3IgU2Vh?= =?UTF-8?B?cmNoIHNlcnZpY2VzIGFuZCBHb29nbGUgUGxheQ==?=

Content-Type

multipart/mixed; boundary="----sinikael-?=_1-17822315833610.20248789944311552"

Received

from LV3PR16MB5922.namprd16.prod.outlook.com (::1) by SA1PR16MB5529.namprd16.prod.outlook.com with HTTPS; Tue, 23 Jun 2026 15:52:48 +0000

from LV3PR16MB5922.namprd16.prod.outlook.com (2603:10b6:408:1b1::15) by LV3PR16MB5922.namprd16.prod.outlook.com (2603:10b6:408:1b1::15) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.139.20; Tue, 23 Jun 2026 15:52:45 +0000

from LV3PR16MB5922.namprd16.prod.outlook.com (2603:10b6:a03:33c::6) by LV3PR16MB5922.namprd16.prod.outlook.com (2603:10b6:a03:33c::6) with MailboxResubmission by AntispamTT id 15.21.139.20; Tue, 23 Jun 2026 15:52:45 +0000

from SJ1PEPF00002316.namprd03.prod.outlook.com (2603:10b6:a03:33c:cafe::69) by SJ0PR03CA0121.outlook.office365.com (2603:10b6:a03:33c::6) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.139.19 via Frontend Transport; Tue, 23 Jun 2026 06:41:44 +0000

from mail-pg1-x546.google.com (2607:f8b0:4864:20::546) by SJ1PEPF00002316.mail.protection.outlook.com (2603:10b6:a0f:fc02::1aa) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.159.10 via Frontend Transport; Tue, 23 Jun 2026 06:41:44 +0000

by mail-pg1-x546.google.com with SMTP id 41be03b00d2f7-c8952346bb9so3631323a12.2 for <[email protected]>; Mon, 22 Jun 2026 23:41:44 -0700 (PDT)

X-Received

by 2002:a05:6a20:d808:b0:38d:fad1:cf2a with SMTP id adf61e73a8af0-3bd18f760camr1637958637.13.1782196903968; Mon, 22 Jun 2026 23:41:43 -0700 (PDT)

Received-Spf

Pass (protection.outlook.com: domain of scoutcamp.bounces.google.com designates 2607:f8b0:4864:20::546 as permitted sender) receiver=protection.outlook.com; client-ip=2607:f8b0:4864:20::546; helo=mail-pg1-x546.google.com; pr=C

Message-Id

<552fe48b58a8c9513a66e14d8088811d441a5104-20397628-1852771076@google.com>

Extracted URLs

  • file https://aka.ms/LearnAboutSenderIdentification

  • file https://c.gle/AOPyDKQFYWptQLhuay6rhnJ22O7VZYLZKN_69fwfLN_kh3A8O6gjKBt-8Lc3DPi-JVb-YuGgYtuTXsXOYLc7pOoxxr-mVR8g3pXaI__ly6gLMAunoTg7uKLZCWB_cJWF9-6EWiTvEcCfEmeVGuUV5K-TIQgHWPYEbkecMTIRDCp7xh4mVYhXU5GNSWk4DaY9j6HkMk7INbLA1e49IswQwz8fgRp9XsrlkP2wM9Z7O1_ETShLk3rQH44dUETmSvm_p8QETmgPReKiUj0hFhX4lmB2NvPhLv9YkgPuLHkLCmg0QUAgZi5VTeY5lMTempYa9ADv46cgAr_rRdh5fCe3GxAvJHEqDTVQH5QgwIGUHpbfzl6RQ5LOK79xhVmCBRX810a27whk8hIlxNdA7i5U96WtMeNdkd0SkxIRKtOFA6CK4pMcleYYv2cmHRG5DuGdfFJ6ir59rrY5tg51-SFdAnfnP4Q8iPJePhuUL2k

  • file https://c.gle/AOPyDKRBtKan3xWC2j4ApiZ_MprPQQyEVOyYue3nw9kWTWAJzQHkcFwG4J9mzyhX_MU0mwEE8M7NBV64fOPeUrXJN4xx7EryssK8zNeXXTSOMFlHNlRA-Wg1aTQW18kClsBz5vuY9S7C7ZdWudkyjN-YD9xrgc8fvrsaF0wFbmd0pNZiqnsq-nneYMbMRg7RaJNovHNa1cWZFzfyzkUA-7OLAIOgj0MjcFZOZF2NoSGKYToePFLKLDLKBVW36L2fphRPWtARdIJ8aJoSwkpn1Q0scNbeiyFFkrLvFi8Gas0KGJlMjv_yyt3V2XbQM_Vab7bHmMUamOfckLjvql8iJ265oeUzGvcu28y3ldP0_hQAVFhs8fET9C_iDYBj7dkF7WbPU2XBuTxXX0r-Xjj4ZlH_6yzny6ncdzFi3NgL-yAaq69e3jHirZUS_Gdtou7hjx8gfKB9Wsr10XoX3Wg8SkdV0AOLmIuSJsaMReUEN1jED9a-UERDtieFXR5qi7L-Q_z-PZ1iCu-GKsbaPqF6Zzz2h8EbsY9D47FHFZ12cR3YA09UhUxBeT357z-kztYqH_Z3eFPTpvEb6_H-GCQPBPaou2H35offJw7fLuWXeavIjdBAZ3cONTvXmu8ZwAg

  • file https://c.gle/AOPyDKSOTbSSheQPtOHBBstVDs_6OsPaVI9-zvGYAA4E8m3EtlW6S1UTEtQb4KAuqtFOLGzALn0Rf6zGY6RsYR3XGyKO3Xs-UmbOHRmI_82S2Z5jc-NMU6s7SON1JmDA_POMPZzx3Wr0wLDCGLpi2GX2GY976yVzmHGOe3Z1YerZyKC8xmbEBHEDyq-jjZnZ7w7PwBiudPwRbxC0rVp8z3SIZDwRqBCu0NWfNpnKmNKl1znpG6dNWX7QzK7CIsnRxQqmKbd_4XiHzLSDzKd4Hg1WZohLqu9X_esXFv95J7WavblUy1HH_ZFF1jte5pIQc8UiZgxpL_4_lVsK534C-oe0zv_VR-bI02OX8Ew6nCP5E3EnfFFZd8o8KEjs55sejKCVf9ZhE1rnZ2a6B2m5lSNtj8hONLaEZTm_5nJn7kM1V7qqvO9MFUTek6y9EXD21TxquAMXNY_zZ4hBaoM59tErb81qpYNF3Ts8sgcbUg

  • file https://c.gle/AOPyDKT6KXZHII6j1qcDFFuE_iQUiPOqVkzfnrqPnZSR-ebsXGOL8XvjWLDdUlEntC9sFOsCZX7yZWT6AVbXo6ywc1kJ1HiMD8D-GrsTaSscAT6xXDezKFrGGwSONReQ4Vjf4L4Bd2f-DGf-oCgKj9CURHr_NBGRKYfILuGynBCvPKmuFDBSZoky5rw72cPW5Dycd9eXLRuRyp70MEXzeDkCfWIhcU9r3nBFYjvRxArhHTcscC0uw4EmDPTfJyoG3gekt2CF4c1lGbSipVMRDLkM76jnmXAzZ-cSknM4jlbCf7npJtg1Bb_xDdyy7LImVtbNMRGXXnceno087A-_EBB-5YVaRHHcjsf6G35KWYatR87Val5ePYgzkb0jn5eaoTRo5NYe1lHM4dvooN7ahp2foLNZGNfjKpBMIAZqvFwnUqTYFnPfqtu-CGIfNzNBCRKa8sQk-WRqlg47-2IWO9XFAHdK8KLZT9AFVdfhmC73GP_HhkOJjYMdRaMEguxiqSuQHM3rIppToSZxzPeQRPDSlaXS73WJ9F4-L2TdAcrklPoZp4vzbhCwO0V7w0X7PYMDFoTPTphuNwen-p7CI5m4huFOZ2LrBDy6vAgESjNRPOK5PrVmLY0HKcUroOzT5E60-ZTJq6mGNMjaV6Y_i5GlMKUrcUCGxO__vwEyvg

  • file https://c.gle/AOPyDKTudDZs13ZrYHQ56GKZY4qk5uoy3f8ErEOdzmVHQ05rnbfLYZmM5SaXyUsB_np3zZwo_oeIy3Ea1yp0bJ2YIBHncazvRGo9a7rNEAGRGy3dkpSqh5Mj_HrjwN3Q0uxk-m20slLAgKM82MJup_XsmhOtt39yxsmfeLmhnzPvL70krx_8-juF2pJSXIT7wWZiqtl0yzK_sDn9asHch4X4BnF6uGKjTszhoo50iuxrZJH3bRoWV4_811bjbPumYWO-6msZTsN3sXoQWLj7VX3vCQyaIoUq-TllZCz2UGWBEEvZmWYlHOqWT504OELu1yA7m9G3ywhMiocQ4WQvSVl3ZsfDq7nwO53y9e2D1sl-yMRBEiSS_3tPOpuTLVu0zHY9AolK9ojtUA2UqfoXiTLoSPp5ajYgdvowWVAfkhf8AaWN-HRLuZen2yd0xS8BZgIN69bob-BSyUxlhBo0ASyCRiNw0tH6sW58DUZFgjth3ArNjEZC9ivuJoAUvwM7OMBXE33odrHT2IpPWu_JzH2L_RSamQ-w56IYu3odcnYciXQ9CXuKL0eQnxLO14GBFzjhKE6aLQR5bUXEluKkGqcKRzJsCcfEUz6Ec9Yp6p14HHJcqoJV1z6hGv3KaJu8faV0HWDR3lLgxkUG3H6TWD6QNCoYsj4lkzZZmEYK-PvzvhM