Overview

overview

1

Static

static

1

tmpelp47ff2.eml

windows10-ltsc_2021-x64

1

tmpelp47ff2.eml

windows10-2004-x64

1

tmpelp47ff2.eml

windows11-21h2-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    tmpelp47ff2
  • Size 64KB
  • Sample260702-rg7mssfx21
  • SHA256 4fde0651887e835c497dba2c71c1d8630034125d53056f42ca4935c2ee20ef2b
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • tmpelp47ff2
    .eml 64KB
  • email-html-1.txt
    .html 56KB

tmpelp47ff2

  • SHA256 4fde0651887e835c497dba2c71c1d8630034125d53056f42ca4935c2ee20ef2b
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

[email protected]

Date

Wed, 24 Jun 2026 19:27:17 +0000

Subject

=?UTF-8?B?W0VYVEVSTkFMXSBZb3VyIEJpcmtlbnN0b2NrIG9yZGVyIGhhcyBh?= =?UTF-8?B?cnJpdmVkIQ==?=

Content-Type

multipart/mixed; boundary="----sinikael-?=_1-17823302638110.8104700724907101"

Received

from IA1PR16MB5359.namprd16.prod.outlook.com (2603:10b6:208:450::10) by SA1PR16MB6977.namprd16.prod.outlook.com with HTTPS; Wed, 24 Jun 2026 19:27:25 +0000

from CY5PR19CA0018.namprd19.prod.outlook.com (2603:10b6:930:15::31) by IA1PR16MB5359.namprd16.prod.outlook.com (2603:10b6:208:450::10) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.159.16; Wed, 24 Jun 2026 19:27:19 +0000

from CY4PEPF0000E9D2.namprd03.prod.outlook.com (2603:10b6:930:15:cafe::2d) by CY5PR19CA0018.outlook.office365.com (2603:10b6:930:15::31) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.159.15 via Frontend Transport; Wed, 24 Jun 2026 19:27:18 +0000

from mta-89-67.sparkpostmail.com (192.174.89.67) by CY4PEPF0000E9D2.mail.protection.outlook.com (10.167.241.137) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.159.10 via Frontend Transport; Wed, 24 Jun 2026 19:27:18 +0000

from [10.90.11.215] ([10.90.11.215]) by i-0476808c27e71976c.mta1vrest.sd.prd.sparkpost (ecelerity 5.2.0.76089 r(msys-ecelerity:tags/5.2.0.41)) with REST id 1F/1B-62624-59F2C3A6; Wed, 24 Jun 2026 19:27:17 +0000

Received-Spf

Pass (protection.outlook.com: domain of spmailtechno.com designates 192.174.89.67 as permitted sender) receiver=protection.outlook.com; client-ip=192.174.89.67; helo=mta-89-67.sparkpostmail.com; pr=E

Message-Id

<1F.1B.62624.59F2C3A6@i-0476808c27e71976c.mta1vrest.sd.prd.sparkpost>

Extracted URLs

  • file https://aka.ms/LearnAboutSenderIdentification

  • file https://cta.narvar.com/f/a/8460Y-LuEj98qHDleKORcg~~/AAG0DBA~/d5Wgzyka1m_PJbWaNdhYWzTiE2BpLVhmCWODjRAFJt567tzmxqfp_ywNhvqStwE8jNW4LytsEMPoYPleV9boRLyvs6-b_t2YFsfQhZeb4XHrI9O9Nn0Cnl306dB1OHgfJICaOk5THrxhtqIcHPGu0OZEPdH8HCagUKJMX-fomLE~

  • file https://cta.narvar.com/f/a/BtSttorXOHrqkyhffyuvCg~~/AAG0DBA~/OVlhLFVh_iB7aW8tHXJIvqTP07K2wYg4TAJUi58dHiUGG0r9ob61Oaxhw2jCIU9RNba5rAph6xOird5obuFHGDvc7XFkqkohNA1v5bbIiEvxeV1mhlmA2Znf-QyMPvzVytD3p9lPyvSReGOjUeryFGvISXWnZPby3EKPlMMa7fMHQvdS-UlCItBZ_iYXJf-uiKeuuBApWY8wPzpwI_r_wleRpqTvtrdAkkTo2_U6hoeXX1jPGbVRlFwRuPtazROS

  • file https://cta.narvar.com/f/a/CSPrnDnBONUDzUmlxflRFQ~~/AAG0DBA~/d5Wgzyka1m_PJbWaNdhYW-7Rd8hleuWgOYclC-YnceUbEqb4Uye6rEQm2V4fi3y-dtb1Y28HLihJIzOF1IfHxmfD4R8PrtvisYdGwAQVTXUrLyRaSuJxyvwXXB3AIeXqYQHqx0Ap_UT7pUeSC9vKGw~~

  • file https://cta.narvar.com/f/a/OUCUM2LKy3fikRaQAJ0gfg~~/AAG0DBA~/d5Wgzyka1m_PJbWaNdhYW1ORu8mWs4BZPI8MBw0EIbkVKvmQ2Oq1ebjYQKaQljy4I-2-hB-C2-2vmg--n3hIe9ifDOgslbMw8c94461_d3m7-b7U0NSAe5cPYS-ANiiGOsLPt869zQGnqaNN55kCqzXGNGnM5o4q4urp28Kz-hHIOfDVmViULbwieIxzJk1nku2DeoOVIrtsRfZBtV_PAmE7B0bYulQyu4F97tdlkUc~

  • file https://cta.narvar.com/f/a/Q7syEmTO-96yifHkMlJvSw~~/AAG0DBA~/OVlhLFVh_iB7aW8tHXJIvk9NqY5Gf7QqOHX1nVuFWBaqXduU6Adlsj1-HoCNJUQQsDqQObgLALcfhKQp3LRfZ_I1Fk-q0XIkoJNh4B30DNDZzltYJrN33w0MrpQSfYHmILs8eDiCQcsQH6Uf2wY0eg~~

  • file https://cta.narvar.com/f/a/SDiHLQAd6825bbENTlbL7Q~~/AAG0DBA~/d5Wgzyka1m_PJbWaNdhYW1HeBzlz2TdNWanKpM5i8cfjNO4b2I7rx7GgPR6e4iBoV6-5r9jAMTFGA5bH0Z-lV3uiiWN-aHzuv1w1A095Vc3Ln_XFepp4_KH425zM-bJ4I-ebtud3T2JC8w-pjvVSnYxXu6G_cQU4SqgM9b8G3niyg85hViPjZF-nEbwSeowplYtMyKRqpmRVinRloZvkzDSh_vMyAPbp-_UTgLOSxYk~

  • file https://cta.narvar.com/f/a/TcQuMFBCE2esSJFXJJtnGQ~~/AAG0DBA~/d5Wgzyka1m_PJbWaNdhYW1HeBzlz2TdNWanKpM5i8cfjNO4b2I7rx7GgPR6e4iBoVJzW1_Sfz4o_71yvqWCzrgmSVG2DpR6En2iZctOcNZRT7M7yJnk63bJyt1O53eZHTy_62iOYDw82ZWCxkrroIbNYa5x1j0R3dJa8qWWw-SJ48jx03f_v892RFBuLOGfdIX-x61ly1xU27T4fTQQ57l4Ih_ESXtfqpMhW7S0QTnE~

  • file https://cta.narvar.com/f/a/W4NrDVFbrWWomqlBTBu1eQ~~/AAG0DBA~/jaa4LPtz_TaCmizIF01SorlG9zmpebQ0ybdP8MPAAgmDRNU6ZQ5aqKESS3YhfuXxspXFsj2ACSOtcCdyx2df_Jm0rELrBMhZyk1FUD3CH-ujc9vyLcSjVw6PNZLZIsOqpjEbs9iO-a93w03kJ9jm324YCaaVpu8W7XcmXooqw-EK8uuACvDVOzRtAd8nqruojm-_iiVoxNxl20e-CN-MgA~~

  • Show all