General

  • Target
    noname (50).eml
  • Size 95KB
  • Sample260703-pp7awsd18p
  • SHA256 bad66fc94bad87d882a352d440fe765fa9c86529e9cc9e32eda360565f5c4c03
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • noname (50).eml
    .eml 95KB
  • message_v2.rpmsg
    63KB

noname (50).eml

  • SHA256 bad66fc94bad87d882a352d440fe765fa9c86529e9cc9e32eda360565f5c4c03
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Date

Fri, 3 Jul 2026 11:45:43 +0000

Subject

[ENCRYPT] Attached Documents from INSIGHT INVESTMENT (IRE) 1/1

Content-Type

multipart/mixed; boundary="_002_4f65waauap1appnpcupmta13ntrscom_"

Received

from PASP264MB5823.FRAP264.PROD.OUTLOOK.COM (2603:10a6:102:49a::13) by PATP264MB6750.FRAP264.PROD.OUTLOOK.COM with HTTPS; Fri, 3 Jul 2026 11:46:26 +0000

from AS8PR05CA0029.eurprd05.prod.outlook.com (2603:10a6:20b:311::34) by PASP264MB5823.FRAP264.PROD.OUTLOOK.COM (2603:10a6:102:49a::13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 + Transport Decrypted) id 15.21.181.11; Fri, 3 Jul 2026 11:45:56 +0000

from AM2PEPF0001C714.eurprd05.prod.outlook.com (2603:10a6:20b:311:cafe::43) by AS8PR05CA0029.outlook.office365.com (2603:10a6:20b:311::34) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.181.11 via Frontend Transport; Fri, 3 Jul 2026 11:45:56 +0000

from esa.hc2212-17.eu.iphmx.com (194.165.202.183) by AM2PEPF0001C714.mail.protection.outlook.com (10.167.16.184) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.181.6 via Frontend Transport; Fri, 3 Jul 2026 11:45:55 +0000

from mx0b-00185f03.pphosted.com ([66.159.250.127]) by esa14.hc2212-17.eu.iphmx.com with ESMTP/TLS/TLS_AES_256_GCM_SHA384; 03 Jul 2026 13:45:56 +0200

from pps.filterd (m0463420.ppops.net [127.0.0.1]) by mx0b-00185f03.pphosted.com (8.18.1.11/8.18.1.11) with ESMTP id 6639avc5003405 for <[email protected]>; Fri, 3 Jul 2026 06:45:53 -0500

from ch4pr04cu002.outbound.protection.outlook.com (mail-northcentralusazon11013015.outbound.protection.outlook.com [40.107.201.15]) by mx0b-00185f03.pphosted.com (PPS) with ESMTPS id 4f2wpfpbxb-1 (version=TLSv1.3 cipher=TLS_AES_256_GCM_SHA384 bits=256 verify=NOT) for <[email protected]>; Fri, 03 Jul 2026 06:45:51 -0500 (CDT)

from SA0PR11CA0024.namprd11.prod.outlook.com (2603:10b6:806:d3::29) by LV9PR13MB7552.namprd13.prod.outlook.com (2603:10b6:408:367::10) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.181.9; Fri, 3 Jul 2026 11:45:45 +0000

from SN1PEPF0002636E.namprd02.prod.outlook.com (2603:10b6:806:d3:cafe::af) by SA0PR11CA0024.outlook.office365.com (2603:10b6:806:d3::29) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.181.10 via Frontend Transport; Fri, 3 Jul 2026 11:45:45 +0000

from ppsdmz.ntrs.com (208.95.148.124) by SN1PEPF0002636E.mail.protection.outlook.com (10.167.241.139) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.181.6 via Frontend Transport; Fri, 3 Jul 2026 11:45:44 +0000

from appwpcupmta03.ntrs.com (appwpcupmta03.ntrs.com [127.0.0.1]) by pps.eopredir (8.18.1.12/8.18.1.12) with ESMTP id 663Bf8TU011936 for <[email protected]>; Fri, 3 Jul 2026 06:45:43 -0500

from appnpcupmta13.ntrs.com ([10.40.71.107]) by appwpcupmta03.ntrs.com (PPS) with ESMTP id 663BjhKb020182 for <[email protected]>; Fri, 03 Jul 2026 06:45:43 -0500 (CDT)

from wnapgfp0004 (wnapgfp0004.ent.ad.ntrs.com [10.86.69.0]) by appnpcupmta13.ntrs.com (8.18.1.7/8.18.1.7) with ESMTP id 663BjhpX007659 for <[email protected]>; Fri, 3 Jul 2026 06:45:43 -0500

Received-Spf

Pass (esa.hc2212-17.eu.iphmx.com: domain of [email protected] designates 66.159.250.127 as permitted sender) identity=mailfrom; client-ip=66.159.250.127; receiver=esa.hc2212-17.eu.iphmx.com; envelope-from="[email protected]"; x-sender="[email protected]"; x-conformance=spf_only; x-record-type="v=spf1"; x-record-text="v=spf1 ip4:66.159.250.127 -all"

Message-Id

<[email protected]>