Overview

overview

4

Static

static

1

eml.eml

windows10-2004-x64

4

eml.eml

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    eml
  • Size 37KB
  • Sample260720-scvccafy5x
  • SHA256 8fe6ff28e5ece4f39f53bcc9f78675b546d4a8f9e110432523eeb114a5583197
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • eml
    .eml 37KB
  • attachment-1
    208B

eml

  • SHA256 8fe6ff28e5ece4f39f53bcc9f78675b546d4a8f9e110432523eeb114a5583197
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

[email protected]

Date

Fri, 10 Jul 2026 18:31:06 +0000

Content-Type

text; name="[email protected]"

Received

from SJ0PR05CA0163.namprd05.prod.outlook.com (2603:10b6:a03:339::18) by BY3PR19MB5237.namprd19.prod.outlook.com (2603:10b6:a03:362::20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.181.17; Fri, 10 Jul 2026 18:31:17 +0000

from MWH0EPF000C6188.namprd02.prod.outlook.com (2603:10b6:a03:339:cafe::63) by SJ0PR05CA0163.outlook.office365.com (2603:10b6:a03:339::18) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.223.3 via Frontend Transport; Fri, 10 Jul 2026 18:31:17 +0000

from MW6PR02CU001.outbound.protection.outlook.com (2a01:111:f403:c007::2) by MWH0EPF000C6188.mail.protection.outlook.com (2603:10b6:30f:fff5::468) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.181.6 via Frontend Transport; Fri, 10 Jul 2026 18:31:16 +0000

from MW4PR03CA0007.namprd03.prod.outlook.com (2603:10b6:303:8f::12) by BL3PR01MB6915.prod.exchangelabs.com (2603:10b6:208:356::21) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.181.17; Fri, 10 Jul 2026 18:31:15 +0000

from SJ5PEPF000001CB.namprd05.prod.outlook.com (2603:10b6:303:8f:cafe::6b) by MW4PR03CA0007.outlook.office365.com (2603:10b6:303:8f::12) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.202.12 via Frontend Transport; Fri, 10 Jul 2026 18:31:13 +0000

from [127.0.0.1] (45.133.174.161) by SJ5PEPF000001CB.mail.protection.outlook.com (10.167.242.40) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.181.6 via Frontend Transport; Fri, 10 Jul 2026 18:31:12 +0000

Received-Spf

Pass (protection.outlook.com: domain of morgancountyfallfoliagefestival.com designates 2a01:111:f403:c007::2 as permitted sender) receiver=protection.outlook.com; client-ip=2a01:111:f403:c007::2; helo=MW6PR02CU001.outbound.protection.outlook.com; pr=C

Fail (protection.outlook.com: domain of morgancountyfallfoliagefestival.com does not designate 45.133.174.161 as permitted sender) receiver=protection.outlook.com; client-ip=45.133.174.161; helo=[127.0.0.1];

Message-Id

<d6ce2c67-6cf5-76a1-3502-ceecfc9b8877@morgancountyfallfoliagefestival.com>