Overview

overview

4

Static

static

1

esraa.ahme..._1.eml

windows10-2004-x64

4

esraa.ahme..._1.eml

windows11-ltsc_2024-x64

1

Resubmissions

01/07/2026, 04:35

260701-e7x5tsgt6v4

01/07/2026, 04:32

260701-e57lgsgt4w4

Sharing

Copy URL Twitter E-mail

General

  • Target
    esraa.ahmed_2026_07_01_attch_1_of_1.eml
  • Size 32KB
  • Sample260701-e7x5tsgt6v
  • SHA256 98fc7e6e01dd9f31eac4f07fcb3dd757d666108c1496caabb09b69d159d8c264
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • esraa.ahmed_2026_07_01_attch_1_of_1.eml
    .eml 32KB
  • email-html-2.txt
    21KB
  • email-plain-1.txt
    5KB

esraa.ahmed_2026_07_01_attch_1_of_1.eml

  • SHA256 98fc7e6e01dd9f31eac4f07fcb3dd757d666108c1496caabb09b69d159d8c264
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

[email protected]

Date

Tue, 30 Jun 2026 14:24:52 +0000

Subject

Build Towards Mastery, Push Toward the Future

Content-Type

multipart/alternative; boundary="_----eeqLO7ahxrDwCzUzdf0oGg===_55/60-29395-4B1D34A6"

Received

from Z01V-MZE-MBX8.damanhealth.ae (10.111.40.89) by Z01V-MZE-MBX8.damanhealth.ae (10.111.40.89) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.2562.37 via Mailbox Transport; Tue, 30 Jun 2026 18:24:57 +0400

from Z01V-MZE-MBX8.damanhealth.ae (10.111.40.89) by Z01V-MZE-MBX8.damanhealth.ae (10.111.40.89) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.2562.37; Tue, 30 Jun 2026 18:24:57 +0400

from mail4.damanhealth.ae (172.27.11.34) by Z01V-MZE-MBX8.damanhealth.ae (10.111.40.89) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.2562.37 via Frontend Transport; Tue, 30 Jun 2026 18:24:57 +0400

from r0nq2pcw.m.learn.coursera.org (r0nq2pcw.m.learn.coursera.org [137.22.227.203]) by mail4.damanhealth.ae with ESMTPS id 65UEOrxv031245-65UEOrxx031245 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK) for <[email protected]>; Tue, 30 Jun 2026 18:24:55 +0400

from [10.90.28.56] ([10.90.28.56]) by i-090f125a089c6813a.mta1vrest.sd.prd.sparkpost (ecelerity 5.2.0.76125 r(msys-ecelerity:tags/5.2.0.43)) with REST id E5/60-29395-4B1D34A6; Tue, 30 Jun 2026 14:24:52 +0000

Message-Id

<E5.60.29395.4B1D34A6@i-090f125a089c6813a.mta1vrest.sd.prd.sparkpost>

Extracted URLs

  • file https://url.uk.m.mimecastprotect.com/s/82JjC922AuZwYv3swilfqagjT?domain=link.coursera.org

  • file https://url.uk.m.mimecastprotect.com/s/APR5C499vIjw7y0tzTDf4avKz?domain=link.coursera.org

  • file https://url.uk.m.mimecastprotect.com/s/AiFtC099oIEArKosJs9f9_wdz?domain=link.coursera.org

  • file https://url.uk.m.mimecastprotect.com/s/B1SfCRLLKuK3gJmcPixf1Ms_o?domain=link.coursera.org

  • file https://url.uk.m.mimecastprotect.com/s/JrPUCZWWGFmWoE4TNFNfBMH_p?domain=link.coursera.org

  • file https://url.uk.m.mimecastprotect.com/s/LfoFCW88KFpny29fmtxfosMb2?domain=link.coursera.org

  • file https://url.uk.m.mimecastprotect.com/s/OcbYCPYYKcDL5OGszf2fx1Wwn?domain=link.coursera.org

  • file https://url.uk.m.mimecastprotect.com/s/Qz3KC299qIxDEvlHvIxf5zvEV?domain=link.coursera.org

  • file https://url.uk.m.mimecastprotect.com/s/TtU3C7AAytPBWvpt4fXfo7iWt?domain=link.coursera.org

  • Show all