Overview

overview

4

Static

static

1

phish_aler...1).eml

windows10-2004-x64

4

phish_aler...1).eml

windows11-ltsc_2024-x64

1

email-html-1.html

windows10-2004-x64

3

email-html-1.html

windows11-ltsc_2024-x64

4

Sharing

Copy URL Twitter E-mail

General

  • Target
    phish_alert_sp2_2.0.0.0 (1).eml
  • Size 47KB
  • Sample260624-ws2m5set4l
  • SHA256 aa685c3c889db7fc27b65eb00726e0d813e1afc34eef78676a067d9b38ef0106
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • phish_alert_sp2_2.0.0.0 (1).eml
    .eml 47KB
  • email-html-1.txt
    .html 35KB

phish_alert_sp2_2.0.0.0 (1).eml

  • SHA256 aa685c3c889db7fc27b65eb00726e0d813e1afc34eef78676a067d9b38ef0106
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

bounce-IYTHDJWPC6EERIDZXSBM523TE4.70258@bounce.emails.hsabank.com

Date

Wed, 24 Jun 2026 11:03:19 -0600

Subject

=?UTF-8?B?W0VYVEVSTkFMXSBNYXJr4oCZcyBzdW1tZXIgSFNBIHVwZGF0ZQ==?=

Content-Type

multipart/mixed; boundary="----sinikael-?=_1-17823236724610.6373261101161998"

Received

from SA1PR16MB5823.namprd16.prod.outlook.com (2603:10b6:806:3a5::14) by DS0PR16MB6832.namprd16.prod.outlook.com with HTTPS; Wed, 24 Jun 2026 17:03:24 +0000

from PH8PR07CA0017.namprd07.prod.outlook.com (2603:10b6:510:2cd::28) by SA1PR16MB5823.namprd16.prod.outlook.com (2603:10b6:806:3a5::14) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.139.18; Wed, 24 Jun 2026 17:03:21 +0000

from CY4PEPF0000FCC2.namprd03.prod.outlook.com (2603:10b6:510:2cd:cafe::c) by PH8PR07CA0017.outlook.office365.com (2603:10b6:510:2cd::28) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.159.15 via Frontend Transport; Wed, 24 Jun 2026 17:03:21 +0000

from mta.emails.hsabank.com (13.111.28.246) by CY4PEPF0000FCC2.mail.protection.outlook.com (10.167.242.104) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.159.10 via Frontend Transport; Wed, 24 Jun 2026 17:03:20 +0000

by mta.emails.hsabank.com id h7g6te39mjcg for <[email protected]>; Wed, 24 Jun 2026 17:03:19 +0000 (envelope-from <bounce-IYTHDJWPC6EERIDZXSBM523TE4.70258@bounce.emails.hsabank.com>)

Received-Spf

Pass (protection.outlook.com: domain of bounce.emails.hsabank.com designates 13.111.28.246 as permitted sender) receiver=protection.outlook.com; client-ip=13.111.28.246; helo=mta.emails.hsabank.com; pr=C

Message-Id

<[email protected]>

Extracted URLs

  • file https://click.emails.hsabank.com/?qs=ABB7InYiOjEsImQiOjQ5MTd9AAcAAAAAAyF74v6Bvf6n0LVk0ZwG8tEDSFVzh_H2-QjCHl2ebQAVQBnKTXAAK1uoJro-8IYVS1ZaxQKq4kQm0_e3Dl9t34FmqaaZZFQ9uqM

  • file https://click.emails.hsabank.com/?qs=ABB7InYiOjEsImQiOjQ5MTd9AAcAAAAAAyF74v6Cptr9lYyXiiT5kZ1FfPVUFE_FMluIE5_i0WQus6zYGBFEfSrsD7fZHz41izoKSr1NNpd88-b_19IFBGgpT8NQTaccsyo

  • file https://click.emails.hsabank.com/?qs=ABB7InYiOjEsImQiOjQ5MTd9AAcAAAAAAyF74v6DzHEmjZKlRwd074cgsIvsLZOQMWH9ZIkRJW-KJ0K8E9tP9U9hjNbRB6ghy-Mao_NYc2-jYXMVbHOaEcglUuLHibNMyFA

  • file https://click.emails.hsabank.com/?qs=ABB7InYiOjEsImQiOjQ5MTd9AAcAAAAAAyF74v6EYhD0wFX4qhzmbCOkFP5oy2xPGu7p80NY9BxXjo3waHVcSAu3JEROMH1LJEu1VzBa1OAI3Es5jrW5ipH-q2DyMgO1L5c

  • file https://click.emails.hsabank.com/?qs=ABB7InYiOjEsImQiOjQ5MTd9AAcAAAAAAyF74v6F4L48NsVlM-hRxBY8ozDn998bXuhVj9QiWyQdJ4qJJuenzOaIrFRr2ab5Z2zxFah9nl5Ko8pwUwwqMnt5lAtSj1b_3MI

  • file https://click.emails.hsabank.com/?qs=ABB7InYiOjEsImQiOjQ5MTd9AAcAAAAAAyF74v6G1ID9Lp7Yd3jJ5RoVHnpm2g9QhaYKEOFLOFqgnYlMM2uGTKHJjH5FPImtut1aYVvUdlZC_z9bzTNuyH7wXwh6dNMtbu4

  • file https://click.emails.hsabank.com/?qs=ABB7InYiOjEsImQiOjQ5MTd9AAcAAAAAAyF74v6HbrZ7Gos5cL7FYqLtdIIf07FXxaLmbHzZ_dcHoJ61VpsK2O5oLl_N9pfpAxowcCC7u46w_NMUVEN_yjyONw6aXBw0nPg

  • file https://click.emails.hsabank.com/?qs=ABB7InYiOjEsImQiOjQ5MTd9AAcAAAAAAyF74v6Iw056_6V1HduLXiDq9rB86A4us_rwyBiA5Jg0c54UUsGVGqsZXursQdeFnqH5AhjfKdZfswJSrD9dRiSIweMVC1pXK-0

  • file https://click.emails.hsabank.com/?qs=ABB7InYiOjEsImQiOjQ5MTd9AAcAAAAAAyF74v6J1GZzOmF6FcN_V9ObsADl0VCCzcm_ISe3e91ctcGFWczPT4ni1lcux6JU2Lkm6imfMRd6VEMg3-MqMJAP2wlW1592FCg

  • Show all