Overview

overview

4

Static

static

1

Credit_Mem...=.html

windows10-2004-x64

3

Credit_Mem...=.html

windows11-ltsc_2024-x64

4

Sharing

Copy URL Twitter E-mail

General

  • Target
    Credit Memo Issued issued Ref# 9077568106.eml
  • Size 21KB
  • Sample260626-za94caft7k
  • SHA256 14a69abe4c4735ad1baf6f57db78dd75226e3d812b749bc0f80c1c33a4ac279f
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • Credit Memo Issued issued Ref# 9077568106.eml
    .eml 21KB
  • Credit_Memo_Rtardelli_Document_06.24.26_cnRhcmRlbGxpQHRveW90YS5jb20uYnI=.html
    .html .js 9KB

Credit Memo Issued issued Ref# 9077568106.eml

  • SHA256 14a69abe4c4735ad1baf6f57db78dd75226e3d812b749bc0f80c1c33a4ac279f
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Date

Wed, 24 Jun 2026 22:16:16 +0000

Subject

Credit Memo Issued issued Ref# 9077568106

Content-Type

multipart/mixed; boundary="_004_da4c8e9074c234a16833374dcc0d936adtoyotacombr_"

Received

from SCYP152MB6486.LAMP152.PROD.OUTLOOK.COM (2603:10d6:300:aa::5) by RO2P152MB7695.LAMP152.PROD.OUTLOOK.COM with HTTPS; Wed, 24 Jun 2026 22:17:03 +0000

from SN7PR04CA0008.namprd04.prod.outlook.com (2603:10b6:806:f2::13) by SCYP152MB6486.LAMP152.PROD.OUTLOOK.COM (2603:10d6:300:aa::5) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.159.14; Wed, 24 Jun 2026 22:16:59 +0000

from SN1PEPF00026369.namprd02.prod.outlook.com (2603:10b6:806:f2:cafe::e) by SN7PR04CA0008.outlook.office365.com (2603:10b6:806:f2::13) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.159.14 via Frontend Transport; Wed, 24 Jun 2026 22:16:57 +0000

from [83.229.81.115] (83.229.81.115) by SN1PEPF00026369.mail.protection.outlook.com (10.167.241.134) with Microsoft SMTP Server id 15.21.159.10 via Frontend Transport; Wed, 24 Jun 2026 22:16:56 +0000

Received-Spf

Fail (protection.outlook.com: domain of toyota.com.br does not designate 83.229.81.115 as permitted sender) receiver=protection.outlook.com; client-ip=83.229.81.115; helo=[83.229.81.115];

X-Mailer

MyPythonMailer/1.0

Message-Id

<[email protected]>