Resubmissions

26/06/2026, 15:37

260626-s2fv9acw7w

26/06/2026, 15:22

260626-ssb6pscv8y8

General

  • Target
    Message.eml
  • Size 51KB
  • Sample260626-ssb6pscv8y
  • SHA256 3c17df1d3f13a3e91927676ba176cb761185305ed01ad26fb051f5fbf323bab9
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • Message.eml
    .eml 51KB
  • 5f7bc563-e3dd-40b7-9a3f-63e9c2e83b2a
    .jpg 8KB
  • 6a1ee886-7b3a-4714-9083-8b515a9f3157
    .png 2KB
  • 856b5622-0ec1-492b-b434-eeb60f4acea5
    .png 560B
  • 89378c41-f17f-46c9-a684-5756332533ad
    .png 944B
  • email-html-2.txt
    .html 16KB
  • email-plain-1.txt
    926B

Message.eml

  • SHA256 3c17df1d3f13a3e91927676ba176cb761185305ed01ad26fb051f5fbf323bab9
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Date

Thu, 25 Jun 2026 21:08:12 +0000

Subject

Miles Wehner shared "Review Hub" with you

Content-Type

multipart/related; boundary="_007_Share30c1509d1d154070b1997ea39e470d0arcid932c21a2f097e0_"; type="multipart/alternative"

Received

from SA1PR13MB5586.namprd13.prod.outlook.com (2603:10b6:806:231::15) by MN2PR13MB4007.namprd13.prod.outlook.com (2603:10b6:208:267::24) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.181.6; Thu, 25 Jun 2026 21:08:13 +0000

from SA1PR13MB5586.namprd13.prod.outlook.com ([fe80::319b:aac9:84e1:a348]) by SA1PR13MB5586.namprd13.prod.outlook.com ([fe80::319b:aac9:84e1:a348%5]) with mapi id 15.21.0181.005; Thu, 25 Jun 2026 21:08:12 +0000

Message-Id

<Share-30c1509d-1d15-4070-b199-7ea39e470d0a.rcid_932c21a2-f097-e000-0186-95d5075232a2.wiid_d4441a4b-7c32-4e56-b0d1-a25d25300b26-ioe_1-tid_871a83a4-a1ce-4b7a-8156-3bcd93a08fba-rh_cae_notifyp-aid_76f1a41f-9b9c-4b87-b69b-3dd3887baff0@odspnotify>

Extracted URLs

  • file https://tceq.sharepoint.com/:l:/r/sites/oce-enf/Lists/Review%20Hub?e=3%3a38b6df64065c48b38d3cf0b0e3b705c2&sharingv2=true&fromShare=true&at=9

  • file https://tceq.sharepoint.com/sites/oce-enf/Lists/Review%20Hub?e=3%3a38b6df64065c48b38d3cf0b0e3b705c2&web=1&openShare=true&fromShare=true&at=9