General

  • Target
    ENC_ cancelamento de cartão de credito.eml
  • Size 67KB
  • Sample260709-hkhcmsdw5j
  • SHA256 82e79050083a681f6854099840176cfebc01464701206a6ef039d47386eb9a06
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • ENC_ cancelamento de cartão de credito.eml
    .eml 67KB
  • attachment-3
    .eml 9KB
  • email-html-2.txt
    .html 1KB
  • email-plain-1.txt
    381B
  • email-html-2.txt
    .html 10KB
  • email-plain-1.txt
    8KB

ENC_ cancelamento de cartão de credito.eml

  • SHA256 82e79050083a681f6854099840176cfebc01464701206a6ef039d47386eb9a06
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

In-Reply-To

077b3582-a7ae-49d7-a5a5-47876c270a55@DU2PPFF02237EB0.EURP250.PROD.OUTLOOK.COM

Return-Path

alertaseguranca+[email protected]

Date

Wed, 8 Jul 2026 17:03:30 +0000

Subject

=?iso-8859-1?Q?ENC:_cancelamento_de_cart=E3o_de_credito?=

Content-Type

multipart/mixed; boundary="_004_DU2PPF53B392C9E02082F3950A26F7C0A4CD6FF2DU2PPF53B392C9E_"

Received

from AM7PR03MB6499.eurprd03.prod.outlook.com (2603:10a6:20b:1bd::5) by AM6PR03MB4568.eurprd03.prod.outlook.com with HTTPS; Wed, 8 Jul 2026 17:03:53 +0000

from DU7P190CA0009.EURP190.PROD.OUTLOOK.COM (2603:10a6:10:550::19) by AM7PR03MB6499.eurprd03.prod.outlook.com (2603:10a6:20b:1bd::5) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.181.15; Wed, 8 Jul 2026 17:03:50 +0000

from DU6PEPF0000B61C.eurprd02.prod.outlook.com (2603:10a6:10:550:cafe::6a) by DU7P190CA0009.outlook.office365.com (2603:10a6:10:550::19) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.202.10 via Frontend Transport; Wed, 8 Jul 2026 17:03:50 +0000

from nat.eu.perception-point.io (99.80.189.20) by DU6PEPF0000B61C.mail.protection.outlook.com (10.167.8.135) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.181.6 via Frontend Transport; Wed, 8 Jul 2026 17:03:49 +0000

from DUZPR08CU001.outbound.protection.outlook.com (mail-duzpr08cu00101.outbound.protection.outlook.com [40.93.64.65]) by inbound-smtp.eu-west-1.amazonaws.com with SMTP id fpqel7v2021q9e694vuvc7shkl2eeaie43t6kl01 for [email protected]; Wed, 08 Jul 2026 17:03:45 +0000 (UTC)

from DU2PR04CA0348.eurprd04.prod.outlook.com (2603:10a6:10:2b4::9) by PA1PR03MB11434.eurprd03.prod.outlook.com (2603:10a6:102:565::5) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.181.11; Wed, 8 Jul 2026 17:03:42 +0000

from DB1PEPF0003922D.eurprd03.prod.outlook.com (2603:10a6:10:2b4:cafe::30) by DU2PR04CA0348.outlook.office365.com (2603:10a6:10:2b4::9) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.202.10 via Frontend Transport; Wed, 8 Jul 2026 17:03:42 +0000

from DUZPR83CU001.outbound.protection.outlook.com (2a01:111:f403:c200::5) by DB1PEPF0003922D.mail.protection.outlook.com (2603:10a6:18:3::184) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.181.6 via Frontend Transport; Wed, 8 Jul 2026 17:03:41 +0000

from DUZP191CA0055.EURP191.PROD.OUTLOOK.COM (2603:10a6:10:4fa::19) by GVXPR10MB8380.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:150:1e0::11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.181.11; Wed, 8 Jul 2026 17:03:32 +0000

from DU6PEPF00009525.eurprd02.prod.outlook.com (2603:10a6:10:4fa:cafe::19) by DUZP191CA0055.outlook.office365.com (2603:10a6:10:4fa::19) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.202.10 via Frontend Transport; Wed, 8 Jul 2026 17:03:32 +0000

from PA4PR04CU001.outbound.protection.outlook.com (2a01:111:f403:d20a::3) by DU6PEPF00009525.mail.protection.outlook.com (2603:10a6:18:3::6) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.181.6 via Frontend Transport; Wed, 8 Jul 2026 17:03:32 +0000

from DU2PPF53B392C9E.EURP250.PROD.OUTLOOK.COM (2603:10a6:18:3::b12) by DU2PPFF02237EB0.EURP250.PROD.OUTLOOK.COM (2603:10a6:18:3::b2a) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.181.12; Wed, 8 Jul 2026 17:03:30 +0000

from DU2PPF53B392C9E.EURP250.PROD.OUTLOOK.COM ([fe80::5f4b:c7f9:bf9d:afc7]) by DU2PPF53B392C9E.EURP250.PROD.OUTLOOK.COM ([fe80::5f4b:c7f9:bf9d:afc7%7]) with mapi id 15.21.0181.012; Wed, 8 Jul 2026 17:03:30 +0000

Received-Spf

Fail (protection.outlook.com: domain of wizink.pt does not designate 99.80.189.20 as permitted sender) receiver=protection.outlook.com; client-ip=99.80.189.20; helo=nat.eu.perception-point.io;

pass (spfCheck: domain of wizink.pt designates 40.93.64.65 as permitted sender) client-ip=40.93.64.65; envelope-from=alertaseguranca+[email protected]; helo=DUZPR08CU001.outbound.protection.outlook.com;

Pass (protection.outlook.com: domain of wizink.pt designates 2a01:111:f403:c200::5 as permitted sender) receiver=protection.outlook.com; client-ip=2a01:111:f403:c200::5; helo=DUZPR83CU001.outbound.protection.outlook.com; pr=C

Pass (protection.outlook.com: domain of hotmail.com designates 2a01:111:f403:d20a::3 as permitted sender) receiver=protection.outlook.com; client-ip=2a01:111:f403:d20a::3; helo=PA4PR04CU001.outbound.protection.outlook.com; pr=C

Message-Id

<DU2PPF53B392C9E02082F3950A26F7C0A4CD6FF2@DU2PPF53B392C9E.EURP250.PROD.OUTLOOK.COM>