General

  • Target
    36000905-b492-cc5b-b334-4ccc376efc66.eml
  • Size 24KB
  • Sample260624-tm3bdadt71
  • SHA256 126f3e6ff426b6d9fd6dffaf151f596b64d0b65ce93590b561150f07a0b60e4d
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • 36000905-b492-cc5b-b334-4ccc376efc66.eml
    .eml 24KB
  • email-html-2.txt
    .html 13KB
  • email-plain-1.txt
    626B

36000905-b492-cc5b-b334-4ccc376efc66.eml

  • SHA256 126f3e6ff426b6d9fd6dffaf151f596b64d0b65ce93590b561150f07a0b60e4d
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

[email protected]

Date

Wed, 24 Jun 2026 13:27:16 +0000

Subject

2026 The Davis Bacon Act =?utf-8?b?4oCT?= Compliance Overview and Payroll Obligations

Content-Type

multipart/alternative; boundary=mk3-5d82a5361940458d906712cc0a3e6590; charset=UTF-8

Received

from DM4PR13MB5883.namprd13.prod.outlook.com (2603:10b6:8:4e::6) by DS7PR13MB4621.namprd13.prod.outlook.com with HTTPS; Wed, 24 Jun 2026 14:20:05 +0000

from SJ0PR03CA0032.namprd03.prod.outlook.com (2603:10b6:a03:33e::7) by DM4PR13MB5883.namprd13.prod.outlook.com (2603:10b6:8:4e::6) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.181.5; Wed, 24 Jun 2026 14:19:46 +0000

from SJ5PEPF000001D6.namprd05.prod.outlook.com (2603:10b6:a03:33e:cafe::b) by SJ0PR03CA0032.outlook.office365.com (2603:10b6:a03:33e::7) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.159.13 via Frontend Transport; Wed, 24 Jun 2026 14:19:45 +0000

from mta17-ab1.mtasv.net (50.31.205.17) by SJ5PEPF000001D6.mail.protection.outlook.com (10.167.242.58) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.159.10 via Frontend Transport; Wed, 24 Jun 2026 14:19:45 +0000

from ip-172-26-13-106.us-east-2.compute.internal (172.26.13.106) by production-pmta-useast2.internal.postmarkapp.com (KumoMTA 10.97.242.196) with ESMTP id bfa7effe6fd711f1a62502de9d34f963 for <[email protected]>; Wed, 24 Jun 2026 14:19:44 +0000

Received-Spf

Pass (protection.outlook.com: domain of pm-bounces.msausaconnect.com designates 50.31.205.17 as permitted sender) receiver=protection.outlook.com; client-ip=50.31.205.17; helo=mta17-ab1.mtasv.net; pr=C

Message-Id

<[email protected]>

Extracted URLs

  • file https://msausaconnect.com/conference/the-davis-bacon-act-compliance-overview-and-payroll-obligations

  • file https://msausaconnect.com/unsubscribe

  • file https://subscriptions.pstmrk.it/unsubscribe?m=1.d75rzeODeQDvZVWN6Kr8NA.SoS8CfVg-Zyau6rVo1i11GC5TaU7Rel30Ge--5mRwqrJyHS7Fe2lh3vBCI8U9-QaeUnx55Pr3k2AuGP3YC1lHEBpgbjb_4Qze9BEH1EhwnGC2k8C0qICs6Pvk7HhwoRKxGvlnjR22QddR_vhCeBz1gPOYmcHx3fiw7MHvCy3IYKTnO3QrWAsyrVLgtSBKnBFL9qBFafAgyxqMwsdaanSmOhs6mqcDZxu2t7gEIyYThkIxR3_x9THpH86YsFJFWnPp9f_FRLd9L3dG7-RU2bhYq4tnqWaHvNyEoo_0NrYZ9UdhNNZ74JXVAt6QSjPvZcBbXHApeI0B7AboBfNdaxIj7jAmJxx1QOQA9VPj4L5YUYbFWu-WM2MZyoKvVLsNbBbtE2CCISmuJvwApqYvnagTfBwyjPCI0dJCBXin3ld8b_LJmBvrQl17gS3gKQa5NIA8fZjNabE_uaEICBt1gTMJg