Overview

overview

8

Static

static

1

NtXvquxLuT...1Z.eml

windows10-2004-x64

1

NtXvquxLuT...1Z.eml

windows11-ltsc_2024-x64

1

attachment-3

windows10-2004-x64

3

attachment-3

windows11-ltsc_2024-x64

8

email-html-2.html

windows10-2004-x64

3

email-html-2.html

windows11-ltsc_2024-x64

3

email-plain-1.txt

windows10-2004-x64

1

email-plain-1.txt

windows11-ltsc_2024-x64

1

invite.ics

windows10-2004-x64

1

invite.ics

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    NtXvquxLuTDituQDIq4QSNr9XrXPdOnT_2026-07-20T08_10_34.261Z.eml
  • Size 62KB
  • Sample260720-j4cryady3x
  • SHA256 f88629f6b7fcfea34db0b3159f7851716f31b883c82645ad328d6f4200020dbd
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • NtXvquxLuTDituQDIq4QSNr9XrXPdOnT_2026-07-20T08_10_34.261Z.eml
    .eml 62KB
  • attachment-3
    1KB
  • email-html-2.txt
    .html 35KB
  • email-plain-1.txt
    1KB
  • invite.ics
    1KB

NtXvquxLuTDituQDIq4QSNr9XrXPdOnT_2026-07-20T08_10_34.261Z.eml

  • SHA256 f88629f6b7fcfea34db0b3159f7851716f31b883c82645ad328d6f4200020dbd
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Sender

Google Calendar <[email protected]>

Return-Path

[email protected]

Date

Fri, 17 Jul 2026 18:25:15 +0000

Subject

Invitation: (No Subject) @ Tue Jun 23, 2026 6am - 7am (EDT) ([email protected])

Content-Type

multipart/mixed; boundary="0000000000008fc77e0656d2ad72"

Received

from DB9PR02MB6809.eurprd02.prod.outlook.com (2603:10a6:10:1fa::19) by AS4PR02MB8382.eurprd02.prod.outlook.com with HTTPS; Fri, 17 Jul 2026 18:25:53 +0000

from AS4P189CA0046.EURP189.PROD.OUTLOOK.COM (2603:10a6:20b:659::11) by DB9PR02MB6809.eurprd02.prod.outlook.com (2603:10a6:10:1fa::19) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.202.18; Fri, 17 Jul 2026 18:25:18 +0000

from AM3PEPF0000A794.eurprd04.prod.outlook.com (2603:10a6:20b:659:cafe::3) by AS4P189CA0046.outlook.office365.com (2603:10a6:20b:659::11) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.223.12 via Frontend Transport; Fri, 17 Jul 2026 18:25:18 +0000

from mx08-00009201.pphosted.com (185.183.28.182) by AM3PEPF0000A794.mail.protection.outlook.com (10.167.16.123) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.245.5 via Frontend Transport; Fri, 17 Jul 2026 18:25:18 +0000

from pps.filterd (m0447334.ppops.net [127.0.0.1]) by mx08-00009201.pphosted.com (8.18.1.11/8.18.1.11) with ESMTP id 66HGk3YM1923548 for <[email protected]>; Fri, 17 Jul 2026 18:25:18 GMT

from mail-vk1-f198.google.com (mail-vk1-f198.google.com [209.85.221.198]) by mx08-00009201.pphosted.com (PPS) with ESMTPS id 4ffq1nsgjv-1 (version=TLSv1.3 cipher=TLS_AES_128_GCM_SHA256 bits=128 verify=NOT) for <[email protected]>; Fri, 17 Jul 2026 18:25:16 +0000 (GMT)

by mail-vk1-f198.google.com with SMTP id 71dfb90a1353d-5bfc75c9fbfso6038361e0c.2 for <[email protected]>; Fri, 17 Jul 2026 11:25:16 -0700 (PDT)

X-Received

by 2002:a05:6122:7c8:b0:5bf:5edc:9aa0 with SMTP id 71dfb90a1353d-5c1bf8043famr739588e0c.7.1784312715262; Fri, 17 Jul 2026 11:25:15 -0700 (PDT)

Received-Spf

SoftFail (protection.outlook.com: domain of transitioning wangkham.ac.th discourages use of 209.85.221.198 as permitted sender)

Message-Id

<[email protected]>

Extracted URLs

  • file https://calendar.google.com/calendar/

  • file https://calendar.google.com/calendar/__;!!P5FZM7ryyeY!VVgPfTR1bYze8ofGkPCMROMfsztUtKfYV1AQfeWFa6isapB3bTu73vBSsPvlb-Bq73lgZmfp-Ooph9aGjVrwDQ$

  • file https://calendar.google.com/calendar/event?action=RESPOND&eid=MXZzY2c3bDMwOTJlcGNwYjU3M2E5NDkzOTYgY2luZHkudG9ycmV5QHNvZGV4by5jb20&rst=1&tok=MTkjNjYxM0B3YW5na2hhbS5hYy50aGU2ZDM5YmExNWY5OWI3YzZiYjQ1Y2Q0NTY0ODA1MWEwZGI4ZWNjODM&ctz=America*2FNew_York&hl=en&es=0

  • file https://calendar.google.com/calendar/event?action=RESPOND&eid=MXZzY2c3bDMwOTJlcGNwYjU3M2E5NDkzOTYgY2luZHkudG9ycmV5QHNvZGV4by5jb20&rst=2&tok=MTkjNjYxM0B3YW5na2hhbS5hYy50aGU2ZDM5YmExNWY5OWI3YzZiYjQ1Y2Q0NTY0ODA1MWEwZGI4ZWNjODM&ctz=America*2FNew_York&hl=en&es=0

  • file https://calendar.google.com/calendar/event?action=RESPOND&eid=MXZzY2c3bDMwOTJlcGNwYjU3M2E5NDkzOTYgY2luZHkudG9ycmV5QHNvZGV4by5jb20&rst=3&tok=MTkjNjYxM0B3YW5na2hhbS5hYy50aGU2ZDM5YmExNWY5OWI3YzZiYjQ1Y2Q0NTY0ODA1MWEwZGI4ZWNjODM&ctz=America*2FNew_York&hl=en&es=0

  • file https://calendar.google.com/calendar/event?action=VIEW&eid=MXZzY2c3bDMwOTJlcGNwYjU3M2E5NDkzOTYgY2luZHkudG9ycmV5QHNvZGV4by5jb20&tok=MTkjNjYxM0B3YW5na2hhbS5hYy50aGU2ZDM5YmExNWY5OWI3YzZiYjQ1Y2Q0NTY0ODA1MWEwZGI4ZWNjODM&ctz=America*2FNew_York&hl=en&es=0

  • file https://calendar.google.com/calendar/event?action=VIEW&eid=MXZzY2c3bDMwOTJlcGNwYjU3M2E5NDkzOTYgY2luZHkudG9ycmV5QHNvZGV4by5jb20&tok=MTkjNjYxM0B3YW5na2hhbS5hYy50aGU2ZDM5YmExNWY5OWI3YzZiYjQ1Y2Q0NTY0ODA1MWEwZGI4ZWNjODM&ctz=America*2FNew_York&hl=en&es=0__;JQ!!P5FZM7ryyeY!VVgPfTR1bYze8ofGkPCMROMfsztUtKfYV1AQfeWFa6isapB3bTu73vBSsPvlb-Bq73lgZmfp-Ooph9aVwspyow$

  • file https://meet.google.com/icb-tavy-zfp?hs=224

  • file https://meet.google.com/icb-tavy-zfp?hs=224__;!!P5FZM7ryyeY!VVgPfTR1bYze8ofGkPCMROMfsztUtKfYV1AQfeWFa6isapB3bTu73vBSsPvlb-Bq73lgZmfp-Ooph9b2c4CLuw$

  • Show all