General

  • Target
    Documento.eml
  • Size 97KB
  • Sample260709-hlxtqaex2w
  • SHA256 0675c079dadc65f535d2ef5afe6ce3d12b38604cc57ef7d21f5d1cdb3a0e1d2e
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • Documento.eml
    .eml 97KB
  • WIZINK descarregar.jpeg
    .jpg 42KB
  • email-html-2.txt
    .html 2KB
  • email-plain-1.txt
    814B

Documento.eml

  • SHA256 0675c079dadc65f535d2ef5afe6ce3d12b38604cc57ef7d21f5d1cdb3a0e1d2e
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

alertaseguranca+[email protected]

Date

Wed, 8 Jul 2026 18:25:17 +0000

Subject

Documento

Content-Type

multipart/mixed; boundary="_004_GV2PR10MB99085F20207FE6D69092653EDAFF2GV2PR10MB9908EURP_"

Received

from PAXPR03MB8165.eurprd03.prod.outlook.com (2603:10a6:102:2bd::9) by AM6PR03MB4568.eurprd03.prod.outlook.com with HTTPS; Wed, 8 Jul 2026 18:25:34 +0000

from DB8P191CA0005.EURP191.PROD.OUTLOOK.COM (2603:10a6:10:130::15) by PAXPR03MB8165.eurprd03.prod.outlook.com (2603:10a6:102:2bd::9) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.181.11; Wed, 8 Jul 2026 18:25:32 +0000

from DU6PEPF0000A7E3.eurprd02.prod.outlook.com (2603:10a6:10:130:cafe::1) by DB8P191CA0005.outlook.office365.com (2603:10a6:10:130::15) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.202.10 via Frontend Transport; Wed, 8 Jul 2026 18:25:31 +0000

from nat.eu.perception-point.io (99.80.189.20) by DU6PEPF0000A7E3.mail.protection.outlook.com (10.167.8.41) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.181.6 via Frontend Transport; Wed, 8 Jul 2026 18:25:31 +0000

from AS8PR07CU003.outbound.protection.outlook.com (mail-as8pr07cu00301.outbound.protection.outlook.com [40.93.65.49]) by inbound-smtp.eu-west-1.amazonaws.com with SMTP id butrm9oprebgatku1a7a8b0jo4g86jjv7t6troo1 for [email protected]; Wed, 08 Jul 2026 18:25:28 +0000 (UTC)

from DU6P191CA0053.EURP191.PROD.OUTLOOK.COM (2603:10a6:10:53e::23) by AM9PR03MB7817.eurprd03.prod.outlook.com (2603:10a6:20b:415::18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.181.14; Wed, 8 Jul 2026 18:25:25 +0000

from DB1PEPF00039230.eurprd03.prod.outlook.com (2603:10a6:10:53e:cafe::6f) by DU6P191CA0053.outlook.office365.com (2603:10a6:10:53e::23) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.202.10 via Frontend Transport; Wed, 8 Jul 2026 18:25:24 +0000

from DUZPR83CU001.outbound.protection.outlook.com (2a01:111:f403:c200::5) by DB1PEPF00039230.mail.protection.outlook.com (2603:10a6:18:3::187) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.181.6 via Frontend Transport; Wed, 8 Jul 2026 18:25:24 +0000

from AS4P192CA0026.EURP192.PROD.OUTLOOK.COM (2603:10a6:20b:5e1::10) by AS5PR10MB8079.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:673::12) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.181.12; Wed, 8 Jul 2026 18:25:20 +0000

from AM4PEPF00027A62.eurprd04.prod.outlook.com (2603:10a6:20b:5e1:cafe::1b) by AS4P192CA0026.outlook.office365.com (2603:10a6:20b:5e1::10) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.202.10 via Frontend Transport; Wed, 8 Jul 2026 18:25:20 +0000

from DU2PR03CU002.outbound.protection.outlook.com (2a01:111:f403:d200::1) by AM4PEPF00027A62.mail.protection.outlook.com (2603:10a6:20f:fff4:0:4:0:7) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.181.6 via Frontend Transport; Wed, 8 Jul 2026 18:25:19 +0000

from GV2PR10MB9908.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:150:342::12) by GV2PR10MB6429.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:150:b2::8) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.181.9; Wed, 8 Jul 2026 18:25:17 +0000

from GV2PR10MB9908.EURPRD10.PROD.OUTLOOK.COM ([fe80::bba8:1a63:925e:b824]) by GV2PR10MB9908.EURPRD10.PROD.OUTLOOK.COM ([fe80::bba8:1a63:925e:b824%6]) with mapi id 15.21.0159.016; Wed, 8 Jul 2026 18:25:17 +0000

Received-Spf

Fail (protection.outlook.com: domain of wizink.pt does not designate 99.80.189.20 as permitted sender) receiver=protection.outlook.com; client-ip=99.80.189.20; helo=nat.eu.perception-point.io;

pass (spfCheck: domain of wizink.pt designates 40.93.65.49 as permitted sender) client-ip=40.93.65.49; envelope-from=alertaseguranca+[email protected]; helo=AS8PR07CU003.outbound.protection.outlook.com;

Pass (protection.outlook.com: domain of wizink.pt designates 2a01:111:f403:c200::5 as permitted sender) receiver=protection.outlook.com; client-ip=2a01:111:f403:c200::5; helo=DUZPR83CU001.outbound.protection.outlook.com; pr=C

Pass (protection.outlook.com: domain of hotmail.com designates 2a01:111:f403:d200::1 as permitted sender) receiver=protection.outlook.com; client-ip=2a01:111:f403:d200::1; helo=DU2PR03CU002.outbound.protection.outlook.com; pr=C

Message-Id

<GV2PR10MB99085F20207FE6D69092653EDAFF2@GV2PR10MB9908.EURPRD10.PROD.OUTLOOK.COM>