General

  • Target
    caa45c55-d4e9-3d3e-6510-4cb05c452d74.eml
  • Size 107KB
  • Sample260722-3ss5bsdf94
  • SHA256 8f8459d0c6a5be03f67fe2955b017d2d9791de2f252471fab223e181e7bd0d51
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • caa45c55-d4e9-3d3e-6510-4cb05c452d74.eml
    .eml 107KB
  • Darlene HalfordCalendar Re-sync.ics
    1KB
  • GqNzAKoR4dIA8Hrm.png
    .png 1KB
  • QrF53b3ZpRrqS5Rj.png
    .png 1KB
  • email-html-1.txt
    .html 59KB
  • gpHBPCZ9CCqfQYr1.png
    .png 1KB

caa45c55-d4e9-3d3e-6510-4cb05c452d74.eml

  • SHA256 8f8459d0c6a5be03f67fe2955b017d2d9791de2f252471fab223e181e7bd0d51
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

[email protected]

Date

Wed, 22 Jul 2026 10:44:17 -0400

Subject

Darlene HalfordMeeting

Content-Type

multipart/related; boundary="------------1P021VWMQp76CLv9Q6s1fZft"

Received

from SJ2P220MB1573.NAMP220.PROD.OUTLOOK.COM (2603:10b6:a03:58c::13) by EA2P220MB1859.NAMP220.PROD.OUTLOOK.COM with HTTPS; Wed, 22 Jul 2026 14:46:31 +0000

from BL1PR13CA0405.namprd13.prod.outlook.com (2603:10b6:208:2c2::20) by SJ2P220MB1573.NAMP220.PROD.OUTLOOK.COM (2603:10b6:a03:58c::13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.245.10; Wed, 22 Jul 2026 14:44:22 +0000

from BL6PEPF00022571.namprd02.prod.outlook.com (2603:10b6:208:2c2:cafe::64) by BL1PR13CA0405.outlook.office365.com (2603:10b6:208:2c2::20) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.270.4 via Frontend Transport; Wed, 22 Jul 2026 14:44:21 +0000

from CO1PR03CU002.outbound.protection.outlook.com (2a01:111:f403:c005::5) by BL6PEPF00022571.mail.protection.outlook.com (2603:10b6:20f:fc04::127) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.245.5 via Frontend Transport; Wed, 22 Jul 2026 14:44:21 +0000

from DS1PR08MB10027.namprd08.prod.outlook.com (2603:10b6:8:20e::8) by SA1PR08MB10896.namprd08.prod.outlook.com (2603:10b6:806:4b2::9) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.245.10; Wed, 22 Jul 2026 14:44:19 +0000

from DS1PR08MB10027.namprd08.prod.outlook.com ([fe80::35c4:6c21:eb37:a3f4]) by DS1PR08MB10027.namprd08.prod.outlook.com ([fe80::35c4:6c21:eb37:a3f4%4]) with mapi id 15.21.0245.009; Wed, 22 Jul 2026 14:44:19 +0000

Received-Spf

Pass (protection.outlook.com: domain of teamsforensic.de designates 2a01:111:f403:c005::5 as permitted sender) receiver=protection.outlook.com; client-ip=2a01:111:f403:c005::5; helo=CO1PR03CU002.outbound.protection.outlook.com; pr=C

User-Agent

Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:91.0) Gecko/20100101 Thunderbird/91.9.0

Message-Id

<[email protected]>

Extracted URLs

  • file https://Facebook.com/Aethonenergy

  • file https://aka.ms/JoinTeamsMeeting?omkt=en-US

  • file https://aka.ms/LearnAboutSenderIdentification

  • file https://dialin.teams.microsoft.com/26c22bb0-fe7f-4f9d-8d04-97931e73e10a?id=731540127

  • file https://dialin.teams.microsoft.com/usp/pstnconferencing

  • file https://google.com/Re0Rc9E

  • file https://teams.microsoft.com/l/meetup-join/19:meeting_OWMxZTRiMTMtZDRkYy00ZDVlLTk4MzgtODU2MzQ1NWU4ZTZl@thread.v2/0?context=%7b%22Tid%22%3a%22144c3596-b4ea-4194-9920-bcf8d768205c%22%2c%22Oid%22%3a%223a0809b0-cfac-4674-985d-e752846675e2%22%7d

  • file https://teams.microsoft.com/meetingOptions/?organizerId=3a0809b0-cfac-4674-985d-e752846675e2&tenantId=144c3596-b4ea-4194-9920-bcf8d768205c&threadId=19_meeting_OWMxZTRiMTMtZDRkYy00ZDVlLTk4MzgtODU2MzQ1NWU4ZTZl@thread.v2&messageId=0&language=en-US

  • file https://www.pinterest.com/Aethonenergy

  • Show all