Overview

overview

1

Static

static

1

attachment-1

windows10-2004-x64

1

attachment-1

windows11-ltsc_2024-x64

1

email-plain-1.txt

windows10-2004-x64

1

email-plain-1.txt

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    attachment.eml
  • Size 84KB
  • Sample260715-b2awkabx7z
  • SHA256 5c15b554c7c16429949426f9f944051bb6d2612fb303ca0c7664018dbbc9e338
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • attachment.eml
    .eml 84KB
  • attachment-2
    .eml 68KB
  • attachment-1
    12KB
  • email-plain-1.txt
    281B

attachment.eml

  • SHA256 5c15b554c7c16429949426f9f944051bb6d2612fb303ca0c7664018dbbc9e338
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

To

clientes+[email protected]

Return-Path

<>

Date

24 Jun 2026 00:49:53 +0200

Subject

Delivery Status Notification (Failure)

Content-Type

multipart/mixed; boundary="_7438d2ac-dc55-42f1-8380-c4e32fc99647_"

Received

from BY3PR19MB4849.namprd19.prod.outlook.com (2603:10b6:a03:355::23) by CY2PR19MB349777.namprd19.prod.outlook.com with HTTPS; Tue, 23 Jun 2026 22:51:04 +0000

from SJ0PR03CA0017.namprd03.prod.outlook.com (2603:10b6:a03:33a::22) by BY3PR19MB4849.namprd19.prod.outlook.com (2603:10b6:a03:355::23) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.139.18; Tue, 23 Jun 2026 22:50:01 +0000

from SJ1PEPF00001CDD.namprd05.prod.outlook.com (2603:10b6:a03:33a:cafe::6f) by SJ0PR03CA0017.outlook.office365.com (2603:10b6:a03:33a::22) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.139.13 via Frontend Transport; Tue, 23 Jun 2026 22:50:01 +0000

from esa.hc1506-8.eu.iphmx.com (23.90.119.215) by SJ1PEPF00001CDD.mail.protection.outlook.com (10.167.242.5) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.159.10 via Frontend Transport; Tue, 23 Jun 2026 22:50:00 +0000

from mail-norwayeastazhn15013060.outbound.protection.outlook.com (HELO OSPPR02CU001.outbound.protection.outlook.com) ([52.102.179.60]) by ob1.hc1506-8.eu.iphmx.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 24 Jun 2026 00:49:56 +0200

from DU7P189CA0030.EURP189.PROD.OUTLOOK.COM (2603:10a6:10:552::34) by PA4PR05MB7648.eurprd05.prod.outlook.com (2603:10a6:102:fd::5) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.139.19; Tue, 23 Jun 2026 22:49:53 +0000

from DB5PEPF00014B95.eurprd02.prod.outlook.com (2603:10a6:10:552:cafe::36) by DU7P189CA0030.outlook.office365.com (2603:10a6:10:552::34) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.159.13 via Frontend Transport; Tue, 23 Jun 2026 22:49:53 +0000

from esa.hc1506-8.eu.iphmx.com (23.90.122.144) by DB5PEPF00014B95.mail.protection.outlook.com (10.167.8.233) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.159.10 via Frontend Transport; Tue, 23 Jun 2026 22:49:53 +0000

from localhost by esa11.hc1506-8.eu.iphmx.com; 24 Jun 2026 00:49:53 +0200

Received-Spf

Pass (protection.outlook.com: domain of esa.hc1506-8.eu.iphmx.com designates 23.90.119.215 as permitted sender) receiver=protection.outlook.com; client-ip=23.90.119.215; helo=esa.hc1506-8.eu.iphmx.com; pr=C

Message-Id

<[email protected]>

Extracted URLs

  • file https://aka.ms/LearnAboutSenderIdentification