Overview

overview

3

Static

static

1

manoj.nada..._1.eml

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    manoj.nadaraja_2026_07_14_attch_1_of_1.eml
  • Size 71KB
  • Sample260714-jattcsbs51
  • SHA256 7bf939e18d9cc785ef2327837ab46af566b243c4e92ef1d5472620874d43f0af
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • manoj.nadaraja_2026_07_14_attch_1_of_1.eml
    .eml 71KB
  • email-html-2.txt
    .html 30KB
  • email-plain-1.txt
    6KB
  • image001.png
    .png 11KB
  • image002.png
    .png 723B
  • image003.png
    .png 943B
  • image004.png
    .png 878B
  • image005.png
    .png 1020B

manoj.nadaraja_2026_07_14_attch_1_of_1.eml

  • SHA256 7bf939e18d9cc785ef2327837ab46af566b243c4e92ef1d5472620874d43f0af
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

[email protected]

Date

Tue, 14 Jul 2026 06:06:54 +0000

Subject

Shall I send over a calendar invite?

Content-Type

multipart/related; boundary="_008_KU4PR01MB806641CFC2C5D9E2FE95D9D1F9F92KU4PR01MB8066apcp_"; type="multipart/alternative"

Received

from Z01V-MZE-MBX7.damanhealth.ae (10.111.40.88) by Z01V-MZE-MBX6.damanhealth.ae (10.111.40.87) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.2562.37 via Mailbox Transport; Tue, 14 Jul 2026 10:07:25 +0400

from Z01V-MZE-MBX8.damanhealth.ae (10.111.40.89) by Z01V-MZE-MBX7.damanhealth.ae (10.111.40.88) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.2562.37; Tue, 14 Jul 2026 10:07:24 +0400

from mail3.damanhealth.ae (172.27.11.34) by Z01V-MZE-MBX8.damanhealth.ae (10.111.40.89) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.2562.37 via Frontend Transport; Tue, 14 Jul 2026 10:07:24 +0400

from OS8PR02CU002.outbound.protection.outlook.com (mail-japanwestazon11022120.outbound.protection.outlook.com [40.107.75.120]) by mail3.damanhealth.ae with ESMTPS id 66E67Lt8019899-66E67LtA019899 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=CAFAIL) for <[email protected]>; Tue, 14 Jul 2026 10:07:22 +0400

from KU4PR01MB8066.apcprd01.prod.exchangelabs.com (2603:1096:d10:79::6) by TY0PR0101MB4465.apcprd01.prod.exchangelabs.com (2603:1096:400:21f::8) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.202.18; Tue, 14 Jul 2026 06:07:18 +0000

from KU4PR01MB8066.apcprd01.prod.exchangelabs.com ([fe80::52ef:a7e8:ac6:db1a]) by KU4PR01MB8066.apcprd01.prod.exchangelabs.com ([fe80::52ef:a7e8:ac6:db1a%3]) with mapi id 15.21.0202.018; Tue, 14 Jul 2026 06:07:18 +0000

Message-Id

<KU4PR01MB806641CFC2C5D9E2FE95D9D1F9F92@KU4PR01MB8066.apcprd01.prod.exchangelabs.com>

Extracted URLs

  • file https://url.uk.m.mimecastprotect.com/s/LHx7CK667u39qwNSMfwf5KBzt?domain=nicesoftwaresolutions.com

  • file https://url.uk.m.mimecastprotect.com/s/LHx7CK667u39qwNSMfwf5KBzt?domain=nicesoftwaresolutions.com/

  • file https://url.uk.m.mimecastprotect.com/s/aElrCN88KFv9Nx8IRsDfys8qz?domain=twitter.com

  • file https://url.uk.m.mimecastprotect.com/s/jkkBCM99KIE9581iJiKf8Aoiy?domain=linkedin.com

  • file https://url.uk.m.mimecastprotect.com/s/l4MoCOZZXhqwAXjfPtzfGq3eS?domain=youtube.com

  • file https://url.uk.m.mimecastprotect.com/s/uzC7CLPP1hEXPOriqhMfyoLYT?domain=facebook.com

  • file https://url.uk.m.mimecastprotect.com/s/uzC7CLPP1hEXPOriqhMfyoLYT?domain=facebook.com/