Overview

overview

3

Static

static

1

RES_ DocuS...00.eml

windows10-ltsc_2021-x64

3

email-html-2.html

windows10-ltsc_2021-x64

3

Resubmissions

21/07/2026, 14:09

260721-rgel1sxerh3

21/07/2026, 14:03

260721-rcvsfavyg13

Sharing

Copy URL Twitter E-mail

General

  • Target
    RES_ DocuSign_ Documento para assinatura - 25.156.556_0001-00.eml
  • Size 67KB
  • Sample260721-rcvsfavyg1
  • SHA256 d371889b30ba352d1f2dd1f2e2e539538a233b8afeeb2da6ad8690c26a2fc366
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • RES_ DocuSign_ Documento para assinatura - 25.156.556_0001-00.eml
    .eml 67KB
  • email-html-2.txt
    .html 12KB
  • email-plain-1.txt
    2KB

RES_ DocuSign_ Documento para assinatura - 25.156.556_0001-00.eml

  • SHA256 d371889b30ba352d1f2dd1f2e2e539538a233b8afeeb2da6ad8690c26a2fc366
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Delivered-To

[email protected]

In-Reply-To

CALP1KdT0Meq11O+qSsJbU8M4_YZ-2M3WQNazMi22f1+[email protected]

Date

Thu, 9 Jul 2026 10:00:12 -0300

Subject

RES: DocuSign: Documento para assinatura - 25.156.556/0001-00

Content-Type

multipart/related; boundary="----=_NextPart_000_007B_01DD0F89.BDA0C870"

Received

by 2002:ac4:9712:0:b0:797:f521:42b6 with SMTP id g18csp4388158pin; Thu, 9 Jul 2026 06:00:43 -0700 (PDT)

from mail-sor-f41.google.com (mail-sor-f41.google.com. [209.85.220.41]) by mx.google.com with SMTPS id 5614622812f47-4a0723028bfsor9411657b6e.13.2026.07.09.06.00.41 for <[email protected]> (Google Transport Security); Thu, 09 Jul 2026 06:00:41 -0700 (PDT)

from VHCLAW50 ([186.248.247.18]) by smtp.gmail.com with ESMTPSA id 5614622812f47-4a1afbfbb6esm3849844b6e.9.2026.07.09.06.00.38 (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Thu, 09 Jul 2026 06:00:39 -0700 (PDT)

X-Received

by 2002:a05:6808:120c:b0:4a0:97bc:53a8 with SMTP id 5614622812f47-4a2050fd411mr5216822b6e.32.1783602041635; Thu, 09 Jul 2026 06:00:41 -0700 (PDT)

by 2002:a05:6808:2f10:b0:49a:8f0d:cdc6 with SMTP id 5614622812f47-4a2051049e1mr5687624b6e.34.1783602040060; Thu, 09 Jul 2026 06:00:40 -0700 (PDT)

Received-Spf

pass (google.com: domain of [email protected] designates 209.85.220.41 as permitted sender) client-ip=209.85.220.41;

X-Mailer

Microsoft Outlook 16.0

Message-Id

<[email protected]>

Extracted URLs

  • file https://airmailman.com/documento?DocuSign=juridico%40fs.com.br

  • file https://exa.com.br

  • file https://na2.docusign.net/Signing/Images/email/Email_Logo.png

  • file https://na2.docusign.net/member/Images/email/docInvite-white.png

  • file https://storage.googleapis.com/assinaturas_fs/assinatura_oficial/exa/logo-exa.png

  • file https://twitter.com/exaoficial

  • file https://www.facebook.com/ExaOficial-106624455351379

  • file https://www.instagram.com/exa_oficial/

  • file https://www.linkedin.com/company/exagosafe/