24d3c5bb-030d-cd12-4f5e-43636b5c256b[.]eml

General

Target
24d3c5bb-030d-cd12-4f5e-43636b5c256b.eml
Size 53KB
Sample260711-dfmdksc131
SHA256 c4d730c97b70eb7a452f1383ece8b0abbc6c24b65034b7b3da8d3930083158c2
MD5 e9a14b09559597310dc1a3bccdef5b8a
SHA1 2ab7fdc99af31602ad12a92e121c252b9d4a0402
SHA512 3a5b228bc0a3f77bd9808fb3d96deb294e3b4efc9f39d6e243078fdfccb51be7355e6732a0114d95ffd61147f720d72cf0fb638d86472ef8b5bb0725424d81b9
SSDEEP 768:NrvHckBFs1bCUtBKZKq8z61To/uyKrZpwdB7GtiV:RvHckPsIUtv/z61To/uyKyUtiV
TLSH
T14A330007BBC32880893ECD50AF0327B8BB3378DD96690C755456662ECE8DF967A445F8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

24d3c5bb-030d-cd12-4f5e-43636b5c256b.eml

.eml 53KB
email-html-2.txt

.html 28KB
email-plain-1.txt

4KB

24d3c5bb-030d-cd12-4f5e-43636b5c256b.eml

SHA256 c4d730c97b70eb7a452f1383ece8b0abbc6c24b65034b7b3da8d3930083158c2
MD5 e9a14b09559597310dc1a3bccdef5b8a
SHA1 2ab7fdc99af31602ad12a92e121c252b9d4a0402
SHA512 3a5b228bc0a3f77bd9808fb3d96deb294e3b4efc9f39d6e243078fdfccb51be7355e6732a0114d95ffd61147f720d72cf0fb638d86472ef8b5bb0725424d81b9
SSDEEP 768:NrvHckBFs1bCUtBKZKq8z61To/uyKrZpwdB7GtiV:RvHckPsIUtv/z61To/uyKyUtiV
TLSH
T14A330007BBC32880893ECD50AF0327B8BB3378DD96690C755456662ECE8DF967A445F8
MD5 SHA1 SHA512 SSDEEP TLSH

Password

M@yIsangPun0NgKamatisNanabaliDahilSabigatng!bon

Email Headers

To

[email protected]

From

[email protected]

Return-Path

0106019f4aef0923-489775fa-98f0-47de-8844-31a6989d433c-000000@send.hmr.ph

Date

Fri, 10 Jul 2026 07:30:07 +0000

Subject

, Find the Right Backup Power Solution This Rainy Season

Content-Type

multipart/alternative; boundary="----=_Part_1241438_821365326.1783668607267"

Received

from KL1PR03MB8572.apcprd03.prod.outlook.com (::1) by SI2PR03MB5772.apcprd03.prod.outlook.com with HTTPS; Fri, 10 Jul 2026 07:31:54 +0000

from PS2PR01CA0006.apcprd01.prod.exchangelabs.com (2603:1096:300:2d::18) by KL1PR03MB8572.apcprd03.prod.outlook.com (2603:1096:820:134::14) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.181.15; Fri, 10 Jul 2026 07:30:08 +0000

from OSA0EPF000000C6.apcprd02.prod.outlook.com (2603:1096:300:2d:cafe::97) by PS2PR01CA0006.outlook.office365.com (2603:1096:300:2d::18) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.202.12 via Frontend Transport; Fri, 10 Jul 2026 07:30:07 +0000

from e234-61.smtp-out.ap-northeast-1.amazonses.com (23.251.234.61) by OSA0EPF000000C6.mail.protection.outlook.com (10.167.240.52) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.181.6 via Frontend Transport; Fri, 10 Jul 2026 07:30:07 +0000

Received-Spf

Pass (protection.outlook.com: domain of send.hmr.ph designates 23.251.234.61 as permitted sender) receiver=protection.outlook.com; client-ip=23.251.234.61; helo=e234-61.smtp-out.ap-northeast-1.amazonses.com; pr=C

Message-Id

<0106019f4aef0923-489775fa-98f0-47de-8844-31a6989d433c-000000@ap-northeast-1.amazonses.com>

Extracted URLs

file http://www.hmr.ph
file http://www.hmr.ph/
file https://aka.ms/LearnAboutSenderIdentification
file https://cdn.resend.app/2b52cc22-75e2-46f0-8237-f7d8c048842a]
file https://hmrauctions-generator.carrd.co/
file https://unsubscribe.resend.com/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjb250YWN0SWQiOiJhNzViOTcwOC05OTZlLTRkMDUtYjY5MC04YjMyM2E3YzNmMGIiLCJhdWRpZW5jZUlkIjoiMGE0NmFlY2MtMDAzOS00NDg5LWJjYzQtYjhmN2QxMWRjYTEwIiwiYnJvYWRjYXN0SWQiOiI1ODhlYTZlMy04ODY0LTRlZWYtYjNmZS00MjcyZWI5MjA0ZWYiLCJ0ZWFtSWQiOiI5MTY4OTA5My03ZDI1LTRmYjEtYjRmYy0xY2EzMzZlOTc0YjkiLCJleHAiOjE4MTUyMDI5MTB9.pP1KtveDrsL2Kmdpj6ANDLM3xt7ioFqIjKFJvdNwLLA

Resubmissions

Sharing