Resubmissions

22/07/2026, 13:26

260722-qpyt7afb954

22/07/2026, 13:23

260722-qmsv6awbmc1

General

  • Target
    Reactivate your cloud storage with one click to restore full service. (1).eml
  • Size 6KB
  • Sample260722-qpyt7afb95
  • SHA256 422beb0bf5800174173148d1c8c2f0329213638022845d2bb5c4d3f061ee13d2
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • Reactivate your cloud storage with one click to restore full service. (1).eml
    .eml 6KB
  • email-html-1.txt
    .html 4KB

Reactivate your cloud storage with one click to restore full service. (1).eml

  • SHA256 422beb0bf5800174173148d1c8c2f0329213638022845d2bb5c4d3f061ee13d2
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

<[email protected]>

Date

Tue, 21 Jul 2026 22:14:36 +0000

Subject

Reactivate your cloud storage with one click to restore full service.

Content-Type

text/html; charset=utf-8

Received

from hyundaicapital.com (131.171.109.136.bc.googleusercontent.com [136.109.171.131]) by EDC-PD-FMAIL-001.seha.ae with SMTP id 66LMEblM015477-66LMEblN015477 for <[email protected]>; Wed, 22 Jul 2026 02:14:38 +0400

Message-Id

<[email protected]>

Extracted URLs

  • file https://storage.googleapis.com/mnrcldtone/lis

  • file https://storage.googleapis.com/unsuballgeocld/lis