General

  • Target
    6d1d9704-b6a0-12e3-9c88-00e1bfdc286a.eml
  • Size 79KB
  • Sample260706-tktw8ads6m
  • SHA256 d038b0850b618a77cf9ca4c9a6d0d36956c23cdb854ca8d6ebe596759ad1257e
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • 6d1d9704-b6a0-12e3-9c88-00e1bfdc286a.eml
    .eml 79KB
  • BL_MAEU9019031O- Bergevessel.html
    .html 1KB
  • email-html-2.txt
    .html 10KB
  • email-plain-1.txt
    2KB
  • image003.png
    .png 39KB

6d1d9704-b6a0-12e3-9c88-00e1bfdc286a.eml

  • SHA256 d038b0850b618a77cf9ca4c9a6d0d36956c23cdb854ca8d6ebe596759ad1257e
  • MD5 SHA1 SHA512 SSDEEP TLSH
Password
infected

Email Headers

In-Reply-To

[email protected]

Date

Mon, 6 Jul 2026 15:10:59 +0000

Subject

=?utf-8?B?Rlc6IEFycml2YWwgTm90aWZpY2F0aW9uIOKAkyBCL0wgTm8uIE1BRVUyNDQw?= =?utf-8?Q?918O_OB/L_#_DOVUN4313?=

Content-Type

multipart/mixed; boundary="_006_734b5fcccfb440009855f2ea1326a238OSNPR04MB9328apcprd04pr_"

Received

from TYNPR04MB9412.apcprd04.prod.outlook.com (2603:1096:405:3d6::10) by KL1PR0401MB4530.apcprd04.prod.outlook.com with HTTPS; Mon, 6 Jul 2026 15:11:17 +0000

from OSNPR04MB9328.apcprd04.prod.outlook.com (2603:1096:604:489::6) by TYNPR04MB9412.apcprd04.prod.outlook.com (2603:1096:405:3d6::10) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.181.8; Mon, 6 Jul 2026 15:10:59 +0000

from OSNPR04MB9328.apcprd04.prod.outlook.com ([::1]) by OSNPR04MB9328.apcprd04.prod.outlook.com ([fe80::a32a:1d3d:eacd:d352%4]) with Microsoft SMTP Server id 15.21.0181.008; Mon, 6 Jul 2026 15:10:59 +0000

Message-Id

<734b5fcccfb440009855f2ea1326a238@OSNPR04MB9328.apcprd04.prod.outlook.com>

Extracted URLs

  • file http://www.bergebulk.com/

  • file https://www.facebook.com/BergeBulkOfficial/

  • file https://www.linkedin.com/company/berge-bulk/