General

  • Target
    bd7b933c-1d69-892c-5a95-b62c2033e6ed.eml
  • Size 524KB
  • Sample260709-njtxyaav3z
  • SHA256 3d2a37f78bc62a5a4e80692d828bc8789ed5d2458ae71b8e808e1631c518aeac
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • bd7b933c-1d69-892c-5a95-b62c2033e6ed.eml
    .eml 524KB
  • email-html-2.txt
    .html 20KB
  • email-plain-1.txt
    7KB
  • image.png
    .png 264KB

bd7b933c-1d69-892c-5a95-b62c2033e6ed.eml

  • SHA256 3d2a37f78bc62a5a4e80692d828bc8789ed5d2458ae71b8e808e1631c518aeac
  • MD5 SHA1 SHA512 SSDEEP TLSH
Password
M@yIsangPun0NgKamatisNanabaliDahilSabigatng!bon

Email Headers

In-Reply-To

SEYPR04MB731702B7C0D2980F4A571D44FCFF2@SEYPR04MB7317.apcprd04.prod.outlook.com

Date

Thu, 9 Jul 2026 08:19:08 +0000

Subject

Re: Berge TaiShan // ETO SINAGPULO, JOEL (52044) // Amendment of E-Appraisal Rating

Content-Type

multipart/related; boundary="_006_26196209817973331783585148763mailyahoocom_"; type="multipart/alternative"

Received

from SEZPR04MB7142.apcprd04.prod.outlook.com (::1) by SEYPR04MB7317.apcprd04.prod.outlook.com with HTTPS; Thu, 9 Jul 2026 08:19:48 +0000

from PSBPR02CA0002.apcprd02.prod.outlook.com (2603:1096:301::12) by SEZPR04MB7142.apcprd04.prod.outlook.com (2603:1096:101:186::5) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.181.8; Thu, 9 Jul 2026 08:19:23 +0000

from TY2PEPF0000AB84.apcprd03.prod.outlook.com (2603:1096:301:0:cafe::49) by PSBPR02CA0002.outlook.office365.com (2603:1096:301::12) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.181.8 via Frontend Transport; Thu, 9 Jul 2026 08:19:21 +0000

from esa2.hc847-16.ap.iphmx.com (139.138.44.82) by TY2PEPF0000AB84.mail.protection.outlook.com (10.167.253.9) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.181.6 via Frontend Transport; Thu, 9 Jul 2026 08:19:21 +0000

from sonic307-20.consmr.mail.sg3.yahoo.com ([106.10.241.37]) by esa2.hc847-16.ap.iphmx.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 09 Jul 2026 01:19:19 -0700

from sonic.gate.mail.ne1.yahoo.com by sonic307.consmr.mail.sg3.yahoo.com with HTTP; Thu, 9 Jul 2026 08:19:17 +0000

Received-Spf

Pass (esa2.hc847-16.ap.iphmx.com: domain of [email protected] designates 106.10.241.37 as permitted sender) identity=mailfrom; client-ip=106.10.241.37; receiver=esa2.hc847-16.ap.iphmx.com; envelope-from="[email protected]"; x-sender="[email protected]"; x-conformance=spf_only; x-record-type="v=spf1"; x-record-text="v=spf1 ptr:yahoo.com ptr:yahoo.net ip4:34.2.71.64/26 ip4:34.2.75.0/26 ip4:34.2.84.64/26 ip4:34.2.85.64/26 ip4:34.2.64.0/22 ip4:34.2.68.0/23 ip4:34.2.70.0/23 ip4:34.2.72.0/22 ip4:34.2.78.0/23 ip4:34.2.80.0/23 ip4:34.2.82.0/23 ip4:34.2.84.0/24 ip4:34.2.86.0/23 ip4:34.2.88.0/23 ip4:34.2.90.0/23 ip4:34.2.92.0/23 ip4:34.2.85.0/24 ip4:34.2.94.0/23 ?all"

X-Mailer

WebService/1.1.26086 YahooMailAndroidMobile

Message-Id

<[email protected]>

Extracted URLs

  • file http://www.bergebulk.com/

  • file https://apc01.safelinks.protection.outlook.com/?url=

  • file https://mail.onelink.me/107872968?pid=nativeplacement&c=US_Acquisition_YMktg_315_SearchOrgConquer_EmailSignature&af_sub1=Acquisition&af_sub2=US_YMktg&af_sub3=&af_sub4=100002039&af_sub5=C01_Email_Static_&af_ios_store_cpp=0c38e4b0-a27e-40f9-a211-f4e2de32ab91&af_android_url=https://play.google.com/store/apps/details?id=com.yahoo.mobile.client.android.mail&listing=search_organize_conquer

  • file https://www.facebook.com/BergeBulkOfficial/

  • file https://www.instagram.com/bergebulk/

  • file https://www.linkedin.com/company/berge-bulk/