Static

static

1

Resubmissions

14/07/2026, 11:23

260714-nhgk8adz6x3

14/07/2026, 11:02

260714-m5h7wsdw4z

14/07/2026, 10:58

260714-m25lqaa16n

14/07/2026, 10:57

260714-m2eqasa15k

14/07/2026, 10:30

260714-mj4xgadt2y3

Sharing

Copy URL Twitter E-mail

General

  • Target
    Dopis o podpore obchodnej spolupráce od spoločnosti Wolong Electric Yinchuan Transformer Co. Ltd..msg
  • Size 4.7MB
  • Sample260714-m2eqasa15k
  • SHA256 3a5c47f130a798d2a9b13f5ecc3f81e19cf8b0b60dba1af02bdede78c61ff666
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • Dopis o podpore obchodnej spolupráce od spoločnosti Wolong Electric Yinchuan Transformer Co. Ltd..msg
    .msg 4.7MB
  • Dopis o podpore obchodnej spolupráce od spoločnosti Wolong Electric Yinchuan Transformer Co., Ltd..docx
    .docx 366KB
  • Wolong Electric Yinchuan Transformer Co., Ltd..pdf
    .pdf 4.2MB

Dopis o podpore obchodnej spolupráce od spoločnosti Wolong Electric Yinchuan Transformer Co. Ltd..msg

  • SHA256 3a5c47f130a798d2a9b13f5ecc3f81e19cf8b0b60dba1af02bdede78c61ff666
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

[email protected]

Date

Tue, 14 Jul 2026 12:13:25 +0800

Subject

=?utf-8?B?RG9waXMgbyBwb2Rwb3JlIG9iY2hvZG5laiBzcG9s?= =?utf-8?B?dXByw6FjZSBvZCBzcG9sb8SNbm9zdGkgV29sb25n?= =?utf-8?B?IEVsZWN0cmljIFlpbmNodWFuIFRyYW5zZm9ybWVy?= =?utf-8?B?IENvLiwgTHRkLg==?=

Content-Type

multipart/mixed; boundary="----=_NextPart_6A55B765_61F40CE0_31BB0961"

Received

from SBAEMBX01.intra.zsr.sk (10.17.102.180) by SBAEMBX01.intra.zsr.sk (10.17.102.180) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.1258.34 via Mailbox Transport; Tue, 14 Jul 2026 06:13:51 +0200

from SBAEMBX01.intra.zsr.sk (10.17.102.180) by SBAEMBX01.intra.zsr.sk (10.17.102.180) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.1258.34; Tue, 14 Jul 2026 06:13:44 +0200

from sbaksmg1.zsr.sk (10.17.102.94) by SBAEMBX01.intra.zsr.sk (10.17.102.180) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.1258.34 via Frontend Transport; Tue, 14 Jul 2026 06:13:44 +0200

from sbaksmg1.zsr.sk (localhost [127.0.0.1]) by sbaksmg1.zsr.sk (Postfix) with ESMTP id 225EEC0004 for <[email protected]>; Tue, 14 Jul 2026 06:13:44 +0200 (CEST)

from out203-205-221-209.mail.qq.com (out203-205-221-209.mail.qq.com [203.205.221.209]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by sbaksmg1.zsr.sk (Postfix) with ESMTPS for <[email protected]>; Tue, 14 Jul 2026 06:13:32 +0200 (CEST)

X-Mailer

QQMail 2.x

Message-Id

<[email protected]>

Extracted URLs

  • file http://qq.com

  • file http://thirdqq.qlogo.cn/ek_qqapp/AQXr3NibbcluPgaH5yFJXYuCoCusdj25tJyAkTaPAxf8mTtu55GAvVuFQelQuvltRHLMIkaEX/0

  • file https://wx.mail.qq.com/home/index?t=readmail_businesscard_midpage&nocheck=true&name=boy%D8%BC&icon=http%3A%2F%2Fthirdqq.qlogo.cn%2Fek_qqapp%2FAQXr3NibbcluPgaH5yFJXYuCoCusdj25tJyAkTaPAxf8mTtu55GAvVuFQelQuvltRHLMIkaEX%2F0&mail=958304985%40qq.com&code=UsmpVOPa_xnjcq2XhPilZgTuNCF5JzZY7oCNMdlZxO58GoAselD37-WPzBRCM1wvPkg0r-D9_TgKPTEPVw1MOQ