Zu0jCE9RpeHnR_OYzpaqiqs9e36bWUNa_2026-07-08T07_10_44[.]464Z[.]eml

Sharing

Copy URL Twitter E-mail

General

Target
Zu0jCE9RpeHnR_OYzpaqiqs9e36bWUNa_2026-07-08T07_10_44.464Z.eml
Size 102KB
Sample260708-h2adcsds7l
SHA256 35acb3e73ae48cffd82412bf07ce8d045c0b2566e9fc131c7e4231dacf6008e8
MD5 8892bf32b2e06c33550817544fd2771f
SHA1 fc054b97773423cd374726f402b22ce93b3c4c3a
SHA512 a303824d215ed463e94ae9c0b849c8e298a14a53b6e45afbfa880aae7121fcbba7ab06ce15a73453601283ce0d2bb6a24c61fb2e6eb36b6168710374ee593cc3
SSDEEP 3072:XANBPkV/3LaFUZPj9UDSKbAJ1OyfZtz8bhhy:XANBPkV/PPZUDgJ1OyfXz+y
TLSH
T189A3F11AF2F54479443212043F177F01F3B22489B522A671B2BDB3A96B810D7BF1AE5B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

pdf

Malware Config

Signatures

Malformed data in PDF
A PDF can contain malformed data to evade detection
pdf

File Explorer

Zu0jCE9RpeHnR_OYzpaqiqs9e36bWUNa_2026-07-08T07_10_44.464Z.eml

.eml 102KB
email-html-2.txt

5KB
email-plain-1.txt

174B
oursb proposal.pdf

.pdf 56KB

Zu0jCE9RpeHnR_OYzpaqiqs9e36bWUNa_2026-07-08T07_10_44.464Z.eml

SHA256 35acb3e73ae48cffd82412bf07ce8d045c0b2566e9fc131c7e4231dacf6008e8
MD5 8892bf32b2e06c33550817544fd2771f
SHA1 fc054b97773423cd374726f402b22ce93b3c4c3a
SHA512 a303824d215ed463e94ae9c0b849c8e298a14a53b6e45afbfa880aae7121fcbba7ab06ce15a73453601283ce0d2bb6a24c61fb2e6eb36b6168710374ee593cc3
SSDEEP 3072:XANBPkV/3LaFUZPj9UDSKbAJ1OyfZtz8bhhy:XANBPkV/PPZUDgJ1OyfXz+y
TLSH
T189A3F11AF2F54479443212043F177F01F3B22489B522A671B2BDB3A96B810D7BF1AE5B
MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

From

[email protected]

Return-Path

[email protected]

Date

Tue, 7 Jul 2026 20:16:32 +0000

Subject

RFQ Project Proposal

Content-Type

multipart/mixed; boundary="_004_CH3PR22MB55476085D02B37C5592D5E60F5F02CH3PR22MB5547namp_"

Received

from PAVPR02MB9617.eurprd02.prod.outlook.com (2603:10a6:102:302::20) by AS8PR02MB8390.eurprd02.prod.outlook.com with HTTPS; Tue, 7 Jul 2026 20:17:02 +0000

from AS4P190CA0007.EURP190.PROD.OUTLOOK.COM (2603:10a6:20b:5de::6) by PAVPR02MB9617.eurprd02.prod.outlook.com (2603:10a6:102:302::20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.181.10; Tue, 7 Jul 2026 20:16:43 +0000

from AM4PEPF00027A6C.eurprd04.prod.outlook.com (2603:10a6:20b:5de:cafe::9d) by AS4P190CA0007.outlook.office365.com (2603:10a6:20b:5de::6) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.181.13 via Frontend Transport; Tue, 7 Jul 2026 20:16:43 +0000

from mx08-00009201.pphosted.com (185.183.28.182) by AM4PEPF00027A6C.mail.protection.outlook.com (10.167.16.90) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.181.6 via Frontend Transport; Tue, 7 Jul 2026 20:16:43 +0000

from pps.filterd (m0168935.ppops.net [127.0.0.1]) by mx08-00009201.pphosted.com (8.18.1.11/8.18.1.11) with ESMTP id 667KBJsT2692829 for <[email protected]>; Tue, 7 Jul 2026 20:16:42 GMT

from cy3pr05cu001.outbound.protection.outlook.com (mail-westcentralusazon11023079.outbound.protection.outlook.com [40.93.201.79]) by mx08-00009201.pphosted.com (PPS) with ESMTPS id 4f96ets0ep-1 (version=TLSv1.3 cipher=TLS_AES_256_GCM_SHA384 bits=256 verify=NOT) for <[email protected]>; Tue, 07 Jul 2026 20:16:41 +0000 (GMT)

from CH3PR22MB5547.namprd22.prod.outlook.com (2603:10b6:610:1d9::10) by PH0PR22MB2860.namprd22.prod.outlook.com (2603:10b6:510:f8::16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.181.10; Tue, 7 Jul 2026 20:16:32 +0000

from CH3PR22MB5547.namprd22.prod.outlook.com ([fe80::b2d5:50bb:89d9:7879]) by CH3PR22MB5547.namprd22.prod.outlook.com ([fe80::b2d5:50bb:89d9:7879%6]) with mapi id 15.21.0181.008; Tue, 7 Jul 2026 20:16:32 +0000

Received-Spf

Pass (protection.outlook.com: domain of oursb.org designates 40.93.201.79 as permitted sender) receiver=protection.outlook.com; client-ip=40.93.201.79; helo=cy3pr05cu001.outbound.protection.outlook.com; pr=C

Message-Id

<CH3PR22MB55476085D02B37C5592D5E60F5F02@CH3PR22MB5547.namprd22.prod.outlook.com>