Overview

overview

1

Static

static

1

INRI INTER...).docx

windows10-2004-x64

1

INRI INTER...).docx

windows11-ltsc_2024-x64

1

Resubmissions

03/07/2026, 04:03

260703-emtxnsbs8z1

02/07/2026, 03:41

260702-d8vknahz9k8

02/07/2026, 03:37

260702-d6hs3sbv8x8

02/07/2026, 03:36

260702-d6bprshz6n1

02/07/2026, 03:32

260702-d3qphshz6l8

Sharing

Copy URL Twitter E-mail

General

  • Target
    message (29).eml
  • Size 3.6MB
  • Sample260703-emtxnsbs8z
  • SHA256 df14a5f2562c402a7edbad2f045a5a84210846a30eeb9e26961b7fb7eadb266f
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • message (29).eml
    .eml 3.6MB
  • IMG_4830.PNG
    .png 515KB
  • INRI INTERNATIONAL Pte Ltd JET A-1 FUEL (002).docx
    .docx 2.0MB
  • email-html-2.txt
    .html 36KB
  • email-plain-1.txt
    7KB
  • image001.png
    .png 11KB
  • image002.jpg
    .jpg 10KB
  • image003.png
    .png 13KB
  • image004.png
    .png 177B
  • image932907.png
    .png 64KB
  • ~WRD0003.jpg
    .jpg 823B

message (29).eml

  • SHA256 df14a5f2562c402a7edbad2f045a5a84210846a30eeb9e26961b7fb7eadb266f
  • MD5 SHA1 SHA512 SSDEEP TLSH
Password
uZ*1K`FW(89]

Email Headers

In-Reply-To

[email protected]

Date

Wed, 1 Jul 2026 10:27:56 +0000

Subject

FW: Inquiry for Tank Storage Services - Jurong Port & Rotterdam

Content-Type

multipart/mixed; boundary="_012_SEZPR04MB749749C1AF26E799CD1C0FB183F62SEZPR04MB7497apcp_"

Received

from SEYPR04MB7285.apcprd04.prod.outlook.com (::1) by SEYPR04MB6457.apcprd04.prod.outlook.com with HTTPS; Wed, 1 Jul 2026 10:28:14 +0000

from SI2PR01CA0003.apcprd01.prod.exchangelabs.com (2603:1096:4:191::16) by SEYPR04MB7285.apcprd04.prod.outlook.com (2603:1096:101:165::9) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.159.19; Wed, 1 Jul 2026 10:28:07 +0000

from SG2PEPF000B66C9.apcprd03.prod.outlook.com (2603:1096:4:191:cafe::1c) by SI2PR01CA0003.outlook.office365.com (2603:1096:4:191::16) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.181.8 via Frontend Transport; Wed, 1 Jul 2026 10:28:06 +0000

from us2.smtp.exclaimer.net (104.209.35.28) by SG2PEPF000B66C9.mail.protection.outlook.com (10.167.240.20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.181.6 via Frontend Transport; Wed, 1 Jul 2026 10:28:04 +0000

from SI4PR04CU001.outbound.protection.outlook.com (40.93.129.53) by us2.smtp.exclaimer.net (104.209.35.28) with Exclaimer Signature Manager ESMTP Proxy us2.smtp.exclaimer.net (tlsversion=TLS12, tlscipher=TLS_DIFFIEHELLMAN_WITH_AES256_NONE); Wed, 1 Jul 2026 10:28:06 +0000

from SEZPR04MB7497.apcprd04.prod.outlook.com (2603:1096:101:1f0::12) by SEZPR04MB7733.apcprd04.prod.outlook.com (2603:1096:101:21e::5) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.181.8; Wed, 1 Jul 2026 10:27:56 +0000

from SEZPR04MB7497.apcprd04.prod.outlook.com ([fe80::63d7:b0e:b1c1:6cf3]) by SEZPR04MB7497.apcprd04.prod.outlook.com ([fe80::63d7:b0e:b1c1:6cf3%2]) with mapi id 15.21.0181.008; Wed, 1 Jul 2026 10:27:56 +0000

Received-Spf

Pass (protection.outlook.com: domain of lockandstore.com designates 104.209.35.28 as permitted sender) receiver=protection.outlook.com; client-ip=104.209.35.28; helo=us2.smtp.exclaimer.net; pr=C

Message-Id

<SEZPR04MB749749C1AF26E799CD1C0FB183F62@SEZPR04MB7497.apcprd04.prod.outlook.com>

Extracted URLs

  • file http://www.avg.com

  • file http://www.avg.com/email-signature?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=emailclient

  • file https://aka.ms/LearnAboutSenderIdentification

  • file https://generalstorageltd.com/