Overview

overview

4

Static

static

1

mahmood.ta..._1.eml

windows10-2004-x64

4

Sharing

Copy URL Twitter E-mail

General

  • Target
    mahmood.tabbish_2026_07_02_attch_1_of_1.eml
  • Size 82KB
  • Sample260702-jfa87sdz4w
  • SHA256 1b6674619a0ad5dbd49306e5d268d1421ca6916913a76469804008c3b261f4ff
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • mahmood.tabbish_2026_07_02_attch_1_of_1.eml
    .eml 82KB
  • email-html-2.txt
    .html 52KB
  • email-plain-1.txt
    6KB

mahmood.tabbish_2026_07_02_attch_1_of_1.eml

  • SHA256 1b6674619a0ad5dbd49306e5d268d1421ca6916913a76469804008c3b261f4ff
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

[email protected]

Date

Thu, 2 Jul 2026 09:12:11 +0200

Subject

From Lazarus to DarkBlinders: 2026's Top 10 actors

Content-Type

multipart/alternative; boundary="----=_Part_220286_1256058985.1782976331230"

Received

from AUXP273MB0231.AREP273.PROD.OUTLOOK.COM (2603:1086:200:23::8) by DX0P273MB1350.AREP273.PROD.OUTLOOK.COM with HTTPS; Thu, 2 Jul 2026 07:13:04 +0000

from DUZP191CA0067.EURP191.PROD.OUTLOOK.COM (2603:10a6:10:4fa::26) by AUXP273MB0231.AREP273.PROD.OUTLOOK.COM (2603:1086:200:23::8) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.181.10; Thu, 2 Jul 2026 07:12:16 +0000

from DU6PEPF0000B621.eurprd02.prod.outlook.com (2603:10a6:10:4fa:cafe::8f) by DUZP191CA0067.outlook.office365.com (2603:10a6:10:4fa::26) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.181.10 via Frontend Transport; Thu, 2 Jul 2026 07:12:15 +0000

from eu-smtp-inbound-delivery-1.mimecast.com (195.130.217.221) by DU6PEPF0000B621.mail.protection.outlook.com (10.167.8.138) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.181.6 via Frontend Transport; Thu, 2 Jul 2026 07:12:15 +0000

from bd77e6d.bf01.eu1.hubspotemail.net (bd77e6d.bf01.eu1.hubspotemail.net [143.244.84.3]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id uk-mta-16-T_1JRNWbNm-Smd6oehSnsA-3; Thu, 02 Jul 2026 08:12:11 +0100

by 172.16.185.10 with SMTP id a0b9znrox27ui25fp8isr5o7x0vlrj5lcf7pccznc1e; Thu, 2 Jul 2026 07:12:11 GMT

Received-Spf

Fail (protection.outlook.com: domain of bf01.eu1.hubspotemail.net does not designate 195.130.217.221 as permitted sender) receiver=protection.outlook.com; client-ip=195.130.217.221; helo=eu-smtp-inbound-delivery-1.mimecast.com;

Message-Id

<1782976328817.dbea05d2-fbe3-4d64-b4ce-58773fa98bdd@bf01.eu1.hubspotemail.net>

Extracted URLs

  • file https://url.uk.m.mimecastprotect.com/s/0ATMC499vILQ352f6TDf46lRM?domain=d31zf804.eu1.hubspotlinks.com

  • file https://url.uk.m.mimecastprotect.com/s/1aH1CVNN2FOL9yncjs4fERX5d?domain=d31zf804.eu1.hubspotlinks.com

  • file https://url.uk.m.mimecastprotect.com/s/2l-CCRLLKu7kBWDFLixf1XThc?domain=d31zf804.eu1.hubspotlinks.com

  • file https://url.uk.m.mimecastprotect.com/s/B9w7C399rILJ0KgfXSPfQpage?domain=d31zf804.eu1.hubspotlinks.com

  • file https://url.uk.m.mimecastprotect.com/s/Do4GC600xhQA8m6TVcGf5k_d2?domain=d31zf804.eu1.hubspotlinks.com

  • file https://url.uk.m.mimecastprotect.com/s/F5aYCOZZXhq94xLTpczfG1krY?domain=d31zf804.eu1.hubspotlinks.com

  • file https://url.uk.m.mimecastprotect.com/s/IW8AC7AAyt3xoNXcJfXfoTU4S?domain=hs-25755956.s.hubspotemail-eu1.net

  • file https://url.uk.m.mimecastprotect.com/s/L1_NCQOOKczErP1TYhmfGzGzU?domain=d31zf804.eu1.hubspotlinks.com

  • file https://url.uk.m.mimecastprotect.com/s/cdeVCN88KFvrX3qF7UDfyL99R?domain=d31zf804.eu1.hubspotlinks.com

  • Show all