Overview

overview

8

Static

static

1

Elektronis...en.msg

windows10-2004-x64

7

Elektronis...en.msg

windows11-ltsc_2024-x64

8

smime.eml

windows10-2004-x64

1

smime.eml

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    Elektronische Übermittlung von Angaben.msg
  • Size 81KB
  • Sample260720-vs16yaaz8z
  • SHA256 bb2445f671ff7dd8ca623f53c5c64d03efce5c4d19e3ab21cd66c55f538fb7f5
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • Elektronische Übermittlung von Angaben.msg
    .msg 81KB
  • smime.p7m
    .eml 11KB

Elektronische Übermittlung von Angaben.msg

  • SHA256 bb2445f671ff7dd8ca623f53c5c64d03efce5c4d19e3ab21cd66c55f538fb7f5
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

[email protected]

Date

Thu, 25 Jun 2026 10:57:42 +0000

Subject

=?utf-8?B?RWxla3Ryb25pc2NoZSDDnGJlcm1pdHRsdW5nIHZvbiBBbmdhYmVu?=

Content-Type

application/pkcs7-mime; smime-type="signed-data"; name="smime.p7m"

Received

from ZR1P278MB2151.CHEP278.PROD.OUTLOOK.COM (2603:10a6:910:bf::12) by ZR2PPFC910B4D7E.CHEP278.PROD.OUTLOOK.COM with HTTPS; Thu, 25 Jun 2026 10:57:55 +0000

from ZR0P278CA0030.CHEP278.PROD.OUTLOOK.COM (2603:10a6:910:1c::17) by ZR1P278MB2151.CHEP278.PROD.OUTLOOK.COM (2603:10a6:910:bf::12) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.159.16; Thu, 25 Jun 2026 10:57:42 +0000

from ZRH2EPF00000151.CHEP278.PROD.OUTLOOK.COM (2603:10a6:910:1c:cafe::69) by ZR0P278CA0030.outlook.office365.com (2603:10a6:910:1c::17) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.159.16 via Frontend Transport; Thu, 25 Jun 2026 10:57:42 +0000

from mx01.mail.admin.ch (162.23.22.160) by ZRH2EPF00000151.mail.protection.outlook.com (10.167.241.21) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.181.6 via Frontend Transport; Thu, 25 Jun 2026 10:57:42 +0000

from mailhost01.mail.admin.ch ([10.176.106.194]) by mx01.mail.admin.ch with ESMTPS id 65PAvgYD006538-65PAvgYF006538 (version=TLSv1.3 cipher=TLS_AES_256_GCM_SHA384 bits=256 verify=NO) for <[email protected]>; Thu, 25 Jun 2026 12:57:42 +0200

from localhost (localhost [127.0.0.1]) by mailhost01.mail.admin.ch (Postfix) with ESMTP id 4gmG3p2lQBz1JBYcp for <[email protected]>; Thu, 25 Jun 2026 12:57:42 +0200 (CEST)

from mailhost01.mail.admin.ch ([127.0.0.2]) by localhost (localhost [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id YElXohSQ2V96 for <[email protected]>; Thu, 25 Jun 2026 12:57:42 +0200 (CEST)

from S021000113127A.adr.admin.ch (s021000113127a.adr.admin.ch [10.187.96.66]) by mailhost01.mail.admin.ch (Postfix) with ESMTPS id 4gmG3p1pfJz1JBYcj for <[email protected]>; Thu, 25 Jun 2026 12:57:42 +0200 (CEST)

Received-Spf

Pass (protection.outlook.com: domain of zas.admin.ch designates 162.23.22.160 as permitted sender) receiver=protection.outlook.com; client-ip=162.23.22.160; helo=mx01.mail.admin.ch; pr=C

Message-Id

<[email protected]>