Overview

overview

4

Static

static

1

A minha Vi...2 .eml

windows11-21h2-x64

4

Sharing

Copy URL Twitter E-mail

General

  • Target
    A minha Via Verde – Confirmação de Adesão - Adesão 4047622 .eml
  • Size 59KB
  • Sample260720-gmsqqaax7t
  • SHA256 2f0b24b7a1c335c81086d2965e9d4d077212f251f2e5634e0ee3cdb438c5d45c
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • A minha Via Verde – Confirmação de Adesão - Adesão 4047622 .eml
    .eml 59KB
  • email-html-1.txt
    .html 28KB

A minha Via Verde – Confirmação de Adesão - Adesão 4047622 .eml

  • SHA256 2f0b24b7a1c335c81086d2965e9d4d077212f251f2e5634e0ee3cdb438c5d45c
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

bounces+[email protected]

Date

Sat, 18 Jul 2026 13:52:20 +0000

Subject

=?UTF-8?Q?A_minha_Via_Verde_=E2=80=93_Confirma?= =?UTF-8?Q?=C3=A7=C3=A3o_de_Ades=C3=A3o_-_Ades?= =?UTF-8?Q?=C3=A3o_4047622=20?=

Content-Type

text/html; charset=utf-8

Received

from GVXPR03MB10825.eurprd03.prod.outlook.com (2603:10a6:150:227::20) by AM6PR03MB4568.eurprd03.prod.outlook.com with HTTPS; Sat, 18 Jul 2026 13:53:23 +0000

from DUZPR01CA0301.eurprd01.prod.exchangelabs.com (2603:10a6:10:4b7::18) by GVXPR03MB10825.eurprd03.prod.outlook.com (2603:10a6:150:227::20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.223.13; Sat, 18 Jul 2026 13:53:03 +0000

from DU6PEPF00009528.eurprd02.prod.outlook.com (2603:10a6:10:4b7:cafe::77) by DUZPR01CA0301.outlook.office365.com (2603:10a6:10:4b7::18) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.223.15 via Frontend Transport; Sat, 18 Jul 2026 13:53:03 +0000

from nat.eu.perception-point.io (99.80.189.20) by DU6PEPF00009528.mail.protection.outlook.com (10.167.8.9) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.245.5 via Frontend Transport; Sat, 18 Jul 2026 13:53:03 +0000

from AM0PR07CU002.outbound.protection.outlook.com (mail-am0pr07cu00204.outbound.protection.outlook.com [40.93.65.68]) by inbound-smtp.eu-west-1.amazonaws.com with SMTP id 2pmjl6r946j20j10ie1ref4fjpvto9jd1srad601 for [email protected]; Sat, 18 Jul 2026 13:53:00 +0000 (UTC)

from DB9PR05CA0022.eurprd05.prod.outlook.com (2603:10a6:10:1da::27) by DB9PR03MB8185.eurprd03.prod.outlook.com (2603:10a6:10:300::20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.223.13; Sat, 18 Jul 2026 13:52:42 +0000

from DB1PEPF000509FC.eurprd03.prod.outlook.com (2603:10a6:10:1da:cafe::6d) by DB9PR05CA0022.outlook.office365.com (2603:10a6:10:1da::27) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.223.14 via Frontend Transport; Sat, 18 Jul 2026 13:52:42 +0000

from OSPPR02CU001.outbound.protection.outlook.com (2a01:111:f403:c20f::7) by DB1PEPF000509FC.mail.protection.outlook.com (2603:10a6:18:3::6d6) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.245.5 via Frontend Transport; Sat, 18 Jul 2026 13:52:42 +0000

from DU2PR04CA0242.eurprd04.prod.outlook.com (2603:10a6:10:28e::7) by GV1PR10MB8708.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:150:1d1::5) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.223.12; Sat, 18 Jul 2026 13:52:35 +0000

from DB5PEPF00014B91.eurprd02.prod.outlook.com (2603:10a6:10:28e:cafe::82) by DU2PR04CA0242.outlook.office365.com (2603:10a6:10:28e::7) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.223.14 via Frontend Transport; Sat, 18 Jul 2026 13:52:35 +0000

from a4i297.smtp2go.com (158.120.81.41) by DB5PEPF00014B91.mail.protection.outlook.com (10.167.8.229) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.245.5 via Frontend Transport; Sat, 18 Jul 2026 13:52:34 +0000

from [10.205.245.216] (helo=[127.0.0.1]) by smtpcorp.com with esmtpsa (TLS1.3:ECDHE_X25519__RSA_PSS_RSAE_SHA256__AES_128_GCM:128) (Exim 4.99.4) (envelope-from <[email protected]>) id 1wl5Sv-FnQW0hPzgP9-uM4U for [email protected]; Sat, 18 Jul 2026 13:52:30 +0000

Received-Spf

Fail (protection.outlook.com: domain of wizink365.onmicrosoft.com does not designate 99.80.189.20 as permitted sender) receiver=protection.outlook.com; client-ip=99.80.189.20; helo=nat.eu.perception-point.io;

pass (spfCheck: domain of wizink365.onmicrosoft.com designates 40.93.65.68 as permitted sender) client-ip=40.93.65.68; envelope-from=bounces+[email protected]; helo=AM0PR07CU002.outbound.protection.outlook.com;

Pass (protection.outlook.com: domain of wizink365.onmicrosoft.com designates 2a01:111:f403:c20f::7 as permitted sender) receiver=protection.outlook.com; client-ip=2a01:111:f403:c20f::7; helo=OSPPR02CU001.outbound.protection.outlook.com; pr=C

Pass (protection.outlook.com: domain of return.smtpcorp.com designates 158.120.81.41 as permitted sender) receiver=protection.outlook.com; client-ip=158.120.81.41; helo=a4i297.smtp2go.com; pr=C

Message-Id

<[email protected]>