Overview

overview

4

Static

static

1

phish_aler...1).eml

windows10-2004-x64

1

phish_aler...1).eml

windows11-ltsc_2024-x64

1

email-html-1.html

windows10-2004-x64

3

email-html-1.html

windows11-ltsc_2024-x64

4

Sharing

Copy URL Twitter E-mail

General

  • Target
    phish_alert_sp2_2.0.0.0 (1).eml
  • Size 25KB
  • Sample260629-n77hyaet9l
  • SHA256 1bf481002a47bd5ba263f34b3cd8eac4539df46c443258bdcdd5c5862c3af80a
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • phish_alert_sp2_2.0.0.0 (1).eml
    .eml 25KB
  • email-html-1.txt
    .html 16KB

phish_alert_sp2_2.0.0.0 (1).eml

  • SHA256 1bf481002a47bd5ba263f34b3cd8eac4539df46c443258bdcdd5c5862c3af80a
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

[email protected]

Date

Mon, 29 Jun 2026 01:57:38 +0000

Subject

=?UTF-8?B?W0VYVEVSTkFMXSBZb3UgaGF2ZSBvbmx5IDI1JSBvZiB5b3VyIGlD?= =?UTF-8?B?bG91ZCBzdG9yYWdlIGxlZnQ=?=

Content-Type

multipart/mixed; boundary="----sinikael-?=_1-17827341082600.9581653069611508"

Received

from IA1PR16MB5456.namprd16.prod.outlook.com (2603:10b6:208:44a::10) by LV8PR16MB6103.namprd16.prod.outlook.com with HTTPS; Mon, 29 Jun 2026 01:57:58 +0000

from SJ0PR03CA0273.namprd03.prod.outlook.com (2603:10b6:a03:39e::8) by IA1PR16MB5456.namprd16.prod.outlook.com (2603:10b6:208:44a::10) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.159.19; Mon, 29 Jun 2026 01:57:56 +0000

from MWH0EPF000C6195.namprd02.prod.outlook.com (2603:10b6:a03:39e:cafe::1a) by SJ0PR03CA0273.outlook.office365.com (2603:10b6:a03:39e::8) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.159.19 via Frontend Transport; Mon, 29 Jun 2026 01:57:55 +0000

from st57p01nt-txnmsbadger004101.apple.com (17.23.6.22) by MWH0EPF000C6195.mail.protection.outlook.com (10.167.249.105) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.181.6 via Frontend Transport; Mon, 29 Jun 2026 01:57:54 +0000

Received-Spf

Pass (protection.outlook.com: domain of email.apple.com designates 17.23.6.22 as permitted sender) receiver=protection.outlook.com; client-ip=17.23.6.22; helo=st57p01nt-txnmsbadger004101.apple.com; pr=C

Message-Id

<[email protected]>

Extracted URLs

  • file https://account.apple.com/choose-your-country/

  • file https://setup.icloud.com/email/prefs/storage?path=STORAGE_AND_BACKUP/CHANGE_STORAGE_PLAN

  • file https://www.apple.com/legal/internet-services/icloud/ww/

  • file https://www.apple.com/legal/internet-services/privacy/

  • file https://www.apple.com/support/icloud/ww