DownloadedMessage (76)[.]zip

DownloadedMessage (76).zip

SHA256 c593c24bdf8cf2a3b4e275dfed21321bec43aea9b51247977e023dd48d952409
MD5 1e14c565308be37327f48a9bdcd7030a
SHA1 c99c454454f5f45aae8a7303f24ad57a1c884692
SHA512 65ac32020572497952e25b80b9642512f9641d95b9d9fb36e3eeb9a6769ad420df58e5acf9d2c9f57a756b71a2a4edf73bffa9da86492922d09acc5e046e1251
SSDEEP 768:yCr1tFHDx5gWVSHOq8Em12n1wyUx2qGdly:yAjw4SHbqcCHMS
TLSH
T1D5D20214E79320D5398E076C7C29D216D8E71FA2B62142D4AF625521F614EFF1232FBC
MD5 SHA1 SHA512 SSDEEP TLSH

Password

infected

Message.eml

SHA256 b93860eacd43900b98bbee66f3803933eef757139e6362cfee194dfc72a8ff48
MD5 7f737a6e759eaf7d42cd899f27c6e448
SHA1 ce2e4973185a4cfc2b6ab2e2dd9274477513fb22
SHA512 58c3adb38357017dd925f3171783600373dd2b80b1ae4c1e42bd311c2956b9140f1aac41f31dc1e61a61a18b416343dc94ca05329b520f5d2fd29db85447a310
SSDEEP 768:1SkFCS++0uBYz1WBiOb5tH18xeKgYOtPM95g/Rl57wm+GFTTdq:1SYp++0uBYz1WBigtH18xeKZO9YiRl5c
TLSH
T15013C0232D015465FF10C12B0E267C0AF597BE8AD8BB99D1709E3E9E07D62771F1C45A
MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

From

[email protected]

Return-Path

[email protected]

Date

Wed, 08 Jul 2026 09:59:22 -0300

Subject

=?utf-8?B?W0VYVEVSTkFMXSBORlMtZSAtIE7Dum1lcm86IDM2NTMzLCBlbWl0ZW50ZSAw?= =?utf-8?B?MS4yNzcuMjk4LzAwMDEtNDQgLSBLSE9NUCBJTkRVU1RSSUEgRSBDT01FUkNJ?= =?utf-8?Q?O_LTDA_foi_autorizada?=

Content-Type

multipart/mixed; boundary="=-GBsp+CttC9r5OHePrY+A4w=="

Received

from SA0PR11CA0119.namprd11.prod.outlook.com (2603:10b6:806:d1::34) by CH0PR10MB4875.namprd10.prod.outlook.com (2603:10b6:610:de::7) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.181.14; Wed, 8 Jul 2026 13:05:04 +0000

from SN1PEPF00036F40.namprd05.prod.outlook.com (2603:10b6:806:d1:cafe::c) by SA0PR11CA0119.outlook.office365.com (2603:10b6:806:d1::34) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.202.9 via Frontend Transport; Wed, 8 Jul 2026 13:05:04 +0000

from mail-pg1-x52d.google.com (2607:f8b0:4864:20::52d) by SN1PEPF00036F40.mail.protection.outlook.com (2603:10b6:80f:fc04::18) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.181.6 via Frontend Transport; Wed, 8 Jul 2026 13:05:03 +0000

by mail-pg1-x52d.google.com with SMTP id 41be03b00d2f7-c96b08cdd1cso400877a12.0 for <[email protected]>; Wed, 08 Jul 2026 06:05:02 -0700 (PDT)

from SENIOR-PROD ([177.69.144.225]) by smtp.gmail.com with ESMTPSA id a92af1059eb24-13b6594f9a0sm21158404c88.4.2026.07.08.06.04.50 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 08 Jul 2026 06:04:59 -0700 (PDT)

X-Received

by 2002:a05:6a20:a10e:b0:3bf:b1f4:747b with SMTP id adf61e73a8af0-3c0bcf497a7mr3207575637.12.1783515901341; Wed, 08 Jul 2026 06:05:01 -0700 (PDT)

Received-Spf

Pass (protection.outlook.com: domain of khomp.com designates 2607:f8b0:4864:20::52d as permitted sender) receiver=protection.outlook.com; client-ip=2607:f8b0:4864:20::52d; helo=mail-pg1-x52d.google.com; pr=C

Message-Id

<QXQ8XFCCQTU4.7XN5NUA4PZYY1@senior-prod>

DANFSE-NFSe-DPS420540720127729800014400001000000000036533.pdf

SHA256 12f1fe1a182c80273607f6568efcd0847257690e42a3fcb22e9b0318eee347a9
MD5 886e83d142a7cfc6504a1aa74a21335a
SHA1 895e7533cb4b3f5280e3c34ca9c3e2eda77f39c4
SHA512 b5701b294dcadabd7d72ec221cc51514b795db437844e09c91f196473b959f9464becd9b42a1bbf3c0e537f731620c6d471fc33613e105666672e6f7d6674ad5
SSDEEP 192:H/2PaHceGgCBQI0iDOm/q4lEHyWI6KTjKcd3eCnWrkU/nCQOSnRC+J5Q5IaCmTUa:HRHTGgC6IFDpNlu1I6ymcHxinCfgC+oV
TLSH
T14F42AF9AF60F9D0CEAD1154ADC25F9118A7C766B1BC63F9A243600C8FCC4DC2626515F
MD5 SHA1 SHA512 SSDEEP TLSH

Extracted URLs

file http://khomp.com
file http://symmetryelectronics.com
file http://www.senior.com.br

NFSe-DPS420540720127729800014400001000000000036533.xml

SHA256 4228f52a959a3f7441c64a4b5b656921eeb1d3fa2fdd5a6563ad1959b016d544
MD5 36760ef053a21ba4f64117b6421c0e1c
SHA1 9dc77db7a55a9e41aaaeb9086d55fae2c0f798e8
SHA512 62487e9d548ac379c0465ee8a6bde607c2918764defb006965c6d7f6e9e8059ab1275debcfa91be3176487dad8c5658b58b5f5cdad6feced9f254712738d726c
SSDEEP 192:CeM5IIuyvneJpT6lzr9j74vxiCdDgGL3oG4y56UAjoN23ZlHpkyrwwRbv8xdXjA:ryUTzxpdoG356UAjoyptrFRoxRA
TLSH
T1C7327ECED6C410A69214EF708FABFE450C81B683C9E69C5A27D23E8954DDB449C4EB87
MD5 SHA1 SHA512 SSDEEP TLSH

email-plain-1.txt

SHA256 64691ed9482e1e28a416a89e1be0dae6f3e5f844351c67fed1f70cce157000be
MD5 5331e3efb32874601d44810fcab6a4f0
SHA1 06e2eeaaf61669bf1fab6315d085a358a5d00e94
SHA512 a85902fa254a6bc9e4dd1595993ba501fe83f52f50d31f3850c0756830f39505281b95b7cd1de1fcc06b1a3a1fb074abc1bf03ca7f00eb8ac8c52189c625acd5
TLSH
T1BE21402D2CC652130622C3327B81968BF09CE481DD5F8261F5AC868E35C8F5598BED18
MD5 SHA1 SHA512 TLSH

Sharing

General

Malware Config

Signatures

File Explorer