General

  • Target
    phish_alert_sp2_2.0.0.0 (1).eml
  • Size 137KB
  • Sample260708-pxtprsfx6t
  • SHA256 98ff9122fb2b9c6a9857a077a584fdcbbc10e1982cb8e2d3c6a5c8cb3069856f
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
pdf

Malware Config

Signatures

  • Malformed data in PDF

    A PDF can contain malformed data to evade detection

File Explorer

  • phish_alert_sp2_2.0.0.0 (1).eml
    .eml 137KB
  • 0090_260707175255_001.pdf
    .pdf 96KB

phish_alert_sp2_2.0.0.0 (1).eml

  • SHA256 98ff9122fb2b9c6a9857a077a584fdcbbc10e1982cb8e2d3c6a5c8cb3069856f
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

[email protected]

Date

Tue, 7 Jul 2026 17:52:55 -0900

Subject

=?UTF-8?B?QXR0YWNoZWQgSW1hZ2U=?=

Content-Type

multipart/mixed; boundary="----sinikael-?=_1-17835142677100.7751241076612784"

Received

from IA6PR16MB6959.namprd16.prod.outlook.com (2603:10b6:208:5dc::12) by CH3PR16MB5465.namprd16.prod.outlook.com with HTTPS; Wed, 8 Jul 2026 02:53:17 +0000

from SJ0PR03CA0200.namprd03.prod.outlook.com (2603:10b6:a03:2ef::25) by IA6PR16MB6959.namprd16.prod.outlook.com (2603:10b6:208:5dc::12) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.181.8; Wed, 8 Jul 2026 02:53:01 +0000

from CO1PEPF00012E7F.namprd03.prod.outlook.com (2603:10b6:a03:2ef:cafe::5d) by SJ0PR03CA0200.outlook.office365.com (2603:10b6:a03:2ef::25) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.181.8 via Frontend Transport; Wed, 8 Jul 2026 02:53:00 +0000

from aw2smtp02.hilcorp.com (44.232.200.44) by CO1PEPF00012E7F.mail.protection.outlook.com (10.167.249.54) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.181.6 via Frontend Transport; Wed, 8 Jul 2026 02:53:00 +0000

from FS2-HotWater.hilcorp.com (FS2-HotWater.hilcorp.com [10.73.32.131]) by aw2smtp02.hilcorp.com (Postfix) with SMTP id 3B9FF98C219 for <[email protected]>; Wed, 8 Jul 2026 02:52:57 +0000 (UTC)

Received-Spf

PermError (protection.outlook.com: domain of hilcorp.com used an invalid SPF mechanism)

X-Mailer

Canon MFP

Message-Id

<[email protected]>