Overview

overview

4

Static

static

1

email-html-2.html

windows10-2004-x64

3

email-html-2.html

windows11-ltsc_2024-x64

4

email-plain-1.txt

windows10-2004-x64

1

email-plain-1.txt

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    Report (5).eml
  • Size 145KB
  • Sample260710-hvcvxae16k
  • SHA256 5c017a0990e6b5813889bac1b30c6967ed0bd4df5b622514d240d9a437ff430b
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • Report (5).eml
    .eml 145KB
  • Invoice-226768.HTML
    .html .js 31KB
  • email-html-2.txt
    .html 69KB
  • email-plain-1.txt
    8KB

Report (5).eml

  • SHA256 5c017a0990e6b5813889bac1b30c6967ed0bd4df5b622514d240d9a437ff430b
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Sender

"karstil.com.tr" <[email protected]>

Return-Path

bounces+[email protected]

Date

Fri, 10 Jul 2026 00:40:28 +0000

Subject

Automatic payment failed

Content-Type

multipart/alternative; boundary="_----lfkk/h8M8bXi952v9TDB7g===_E9/4A-34589-533EF4A6"

Received

from PR0P264MB2273.FRAP264.PROD.OUTLOOK.COM (2603:10a6:102:169::14) by MRZP264MB1541.FRAP264.PROD.OUTLOOK.COM with HTTPS; Fri, 10 Jul 2026 00:41:30 +0000

from PA7P264CA0159.FRAP264.PROD.OUTLOOK.COM (2603:10a6:102:36c::12) by PR0P264MB2273.FRAP264.PROD.OUTLOOK.COM (2603:10a6:102:169::14) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.181.17; Fri, 10 Jul 2026 00:40:33 +0000

from PA2PEPF00019232.FRAP264.PROD.OUTLOOK.COM (2603:10a6:102:36c:cafe::56) by PA7P264CA0159.outlook.office365.com (2603:10a6:102:36c::12) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.202.12 via Frontend Transport; Fri, 10 Jul 2026 00:40:32 +0000

from MRWPR03CU001.outbound.protection.outlook.com (2a01:111:f403:c207::3) by PA2PEPF00019232.mail.protection.outlook.com (2603:10a6:108:2::26) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.181.6 via Frontend Transport; Fri, 10 Jul 2026 00:40:32 +0000

from AS9PR04CA0176.eurprd04.prod.outlook.com (2603:10a6:20b:530::8) by PA4PR08MB7434.eurprd08.prod.outlook.com (2603:10a6:102:2a5::18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.181.15; Fri, 10 Jul 2026 00:40:29 +0000

from AMS1EPF00000090.eurprd05.prod.outlook.com (2603:10a6:20b:530:cafe::b) by AS9PR04CA0176.outlook.office365.com (2603:10a6:20b:530::8) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.202.12 via Frontend Transport; Fri, 10 Jul 2026 00:40:29 +0000

from karstil.com.tr (103.253.42.155) by AMS1EPF00000090.mail.protection.outlook.com (10.167.242.87) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.181.6 via Frontend Transport; Fri, 10 Jul 2026 00:40:28 +0000

Received-Spf

Pass (protection.outlook.com: domain of capuchinosusera.com designates 2a01:111:f403:c207::3 as permitted sender) receiver=protection.outlook.com; client-ip=2a01:111:f403:c207::3; helo=MRWPR03CU001.outbound.protection.outlook.com; pr=C

Pass (protection.outlook.com: domain of karstil.com.tr designates 103.253.42.155 as permitted sender) receiver=protection.outlook.com; client-ip=103.253.42.155; helo=karstil.com.tr; pr=M

Message-Id

<72487e71-0c21-4ffd-964c-9cc065b195c0@AMS1EPF00000090.eurprd05.prod.outlook.com>

Extracted URLs

  • file https://aka.ms/LearnAboutSenderIdentification

  • file https://d15k2d11r6t6rl.cloudfront.net/public/users/Integrators/669d5713-9b6a-46bb-bd7e-c542cff6dd6a/dbd2aed76799423eb15458fac1e397dc/Transactional/Tags/Transactional_Email_Tag_Payment-failed_EN_24-04.png]

  • file https://d2axdqolvqmdvx.cloudfront.net/b4c8598c-b6d1-40bd-8e42-44c1c052f5d5/Visa.png]

  • file https://links.surfshark.com/s/c/ByTXmXO6-KdLWj2fJuvNy2GLh9aCEgRfAx05ciVwbBQidUubgALU7MhG1EY2oDZaN7M7pQBVoncJmm7lAkp-dXQVGR8ytO8BDTIjPcjIY86DFkMk_KlZChhOSbfCsJ00iJSAJ4SncJ6cozl06vszt5AZ8nbcV02BPyRYz17BbEHHc_gMXtz0u8EmI1ccmvaY2KDvqPIktSulq9xtq8ryrChWCiAlWanPQbi6iegCwq7mfDsZ5Z0lsfZBWrr-FpRkQ86vhB-y3Er0A-9_0hBzUiwj-hvvSrHP945Xpp8iA-bTYYWhfOb4IeKMRpAn0ES36H6EmGcfuHImNMnQQpGdYoiYwOpHggDrGJ-4vKawlP3jaRJWm9yVACHVO1XXUIMIsPY9l4UBE72223mX0P5Sg6GWz7YYlk0LUCv631SZGsLpYk18qRQaXaXyWXccaFXR2P3uwA7cNT5DPNT15IlinT4V67skt6jK-im2PKYfOj1Od5T285B5f2znctGB31RVLbHeCAIxTcxvjjPkxG8y_qJM6Uszbe42s9paSGhl9s4wRwAZr-rxvma6c-a6Pw_6LJQ/Lm0c4dtMwzKAqXaQcz2z40YUBb3FD3Xm/22

  • file https://links.surfshark.com/s/c/OmUsDvZ26GnGiWhOITC2SmqXs0gypEqKV9IrqTsgg0_7bjUUodfJRaL81E6PgVaRIJ9kl4q29_o7zmr0YIxjgyBjp8DP45G_h4rx-QkLoFKR15PyYgn69FwW_ge4w_pDZT19p2F1keuaFiZqdhEatEeb9SB5WfxqkenqZdJ-IowZpqAUmzs5SzCNGH5L7VeHsPdcx3353x18jYtFurUg2mn2QNvaugER5DKQDmULiz3XZUdTcPl4eZyykwkxk2acQQGaGCIsbreKIJPsxMhycMVf0WOw_CRD5oW1_fRqiaKASV-ieT51PFKU3IREFvjmXRNnXGX67yULKkz3PWW8p2o9kyXVeI6rGQHZwsuQfo0qeEZCKC4VF-3LOdmSaM2Y9w2R26oNjCvJERvREX3ygmH9C3ajHH8CQiFu39kac_cWbouGRKphYeQcpzMtpc-Zwp2vvaisnEG7BhoAMX-CBKBwsicQ7cRHkKzW7r_4_-YfaBEdVI728JX_w3moHuXpARTIhke_0UvHjw_USyKGU0wejzc9Qr9N3jsDlwKzR-fHDSfFtO4omcDKrltxxdGmkNM/M-Sw0KwkMZzEIB7Y8rbQqrezucF0FPwt/22

  • file https://links.surfshark.com/s/c/Z55PEdO6Thyx3DIh3js64vFlVBjPaz7lQs9fh1rpQye5bCOThwSPiP0o7ODaXRcfvwgiDN4MqK0sNSYjeRCGlS6GORRUWbRITS8N3lZqCB_Zz3nwC2-hI72zzEk5ZiCY6-Euw-LMuYacrNllDYeUK__q6TzcUrnYE8VC-2OpqGOhO8b9kPxFSaCi1ckIMOkAN6MW03OY7MR9iYnyeYJ_sAqhJqmcPpoVI9ZT-5NLwKdqA7Por7QNh3RvuvVKAqbFUqfIY9emXAg1c5swy4EYr8KKQHl5EL6jDEgv5AJaChFdvuCTn91jsLfjZfhrTnvdALIV0BxYJz7_jN86HfeWyZ0_ND8wjz_KL8GDcH-U5kGZ7-zdM9bw52FRKLyfZpRNqZsrenBNH_-yCwqVLVgnpIHl0CI6DiGnEx27YNvZhNWTK33j3_EoSemLPRIeJ-nVjrV8yeq9OYw5U4vxGuokqZnttdkC17-M3Sb1arVXw9FHndiTz6RTc7zT7YmLm70sFY4ZXQ11_IwZc5RqL1WTW0NuqYA/einmTAIWZnQerKjPPRaKDPysT53IUW7w/22

  • file https://links.surfshark.com/s/c/biFWDiTHvrYNPRxy3XAFrtaqJ_uo9rJQ6iPOdNrsfUTqJvVYHTYaoDvyAzOkzCQfF1OQJdS4KXr5BXiB7_ATWH71UkjazPAMgCh8q5wysY9-HLNUCagtl9GH0ghY57g7PBjqjEMO3puISusnFgiDScreMvkYTQ_QGAC6r9DmW4RHwSaW7HO4aIQb0qZ3erleeEaCGKR_2lrgoVUM4KUA0vlrQ7HsaXQZKMoZa7m_W3g0p2XZD3HEWmgmMRT_8bQgmg_iL6W1LWkb_UoS_B2JWTjE7jxehUPV69qwj0og4TFz0VC_yk3ylHoU_W4mW0F_XSgRNsAUnE900QFDYAXK4PvqkuRkxNY4e9JWmlPIKQg-6KMI4QclnAbU7ap1isoUft1dZG1jzinUi3N3LV3V6hlzXr_GcvQloOJt7MkpgQZhz67qD8404whBJ-OO7CVOdcm6kFb38uSZt3NUCb0khSOGhqVWQsRrJZPxrw/QHEuTSQAz6v05rRB4budHfeuYSVIjrq0/22

  • file https://links.surfshark.com/s/c/jER7ZE61dyvKgV7dkYiFUurAvbxh-83sUWZDajxsSZOhxhbXddtZqvJ-ONDGtwon-AwIjgZbenN5T9SoJNoQtxsfK4-szS6fpe9UfGbVa1qgYLRI6L9NOPssCAWiNnwk2zuWY8LqGmhHSRu2BDFWU3X8pMsXQhuWkYla-s2bPnjnIcRyqY8chIBy2CleshIjTh6lN9hABVaZnU3Zi9B9DsVSlAoY7B6f3Bem7aR2sumfKu-OvIH3eOVtWDMFiXXq99MI4A7w2fH_F95wP24VHAjBwKdPdQeYqT8XRmKBPdcA_YJ9qNL4qI0kwe2OR1OxItrfshBb5kWwANSaChnQpic2PLxVhcAXlh1v0Iz3DWiVDlkPJVfA85Ondb0q8pWklaLTIO-oKsZ6cU_yAIuj9UKhve6FxxuM0MA6NL8QxdhWiehArJx1aIz2f_-8v3ENTdj1i1gC2KRNKfosNhhde6gfiHjgrl1fEa4u1a6eFZ8/S4XaCXNz_rt0nDF4OOIiAOT0BO_47MY2/22

  • file https://links.surfshark.com/s/c/r4UWT0zsWOJ1QGGBaL8cIHxPAzV3VOXmjB4fQjsDXCKhjGgNXKf2u1Y4hF2EdkcjP3OCwm8Yot98_KT83BQ8CQVqJcqj1wH8rxGIetgF--9Q1JquP9xz59A_mAfRRTe0GqhRjJsCUC68bA29LoqrwkTy16wZJT47d1DacrbrGQjmNUcoydex0-851kTYSlhLMDgEEo0V5nXyoUOB9UWUrmNhtdTuyk_f3jZnGK2D9a5NtDiZeMPQwEpzj9X9wptQjwEyN_Y3LIu8_VqAso2wagsotnJ10q1rwhD25t0qsC0VUAwTsTuYFvE70u56iZAPElVgwquN-TVU8PyaxrX9rMUzO47vTvb6GphRFp1l0swzvHINyFcxe7C9hoM0lzUWvhWGl-MskFCA2pecY7euCaT7rkk1bl1-DD50C4e7z_Tqjc22S7IVGumrVC6AJ30/QT-uyWwr5iJSz3JNugERQSbw1F4Qxk03/22

  • Show all