Overview

overview

3

Static

static

1

6a60c84971...84.eml

windows11-21h2-x64

3

email-html-2.html

windows11-21h2-x64

3

email-plain-1.txt

windows11-21h2-x64

3

image.jpg

windows11-21h2-x64

Sharing

Copy URL Twitter E-mail

General

  • Target
    6a60c84971628380d91b6f84.eml
  • Size 204KB
  • Sample260722-r1clrss1ht
  • SHA256 665b4c47ed302a26cfc1f73eb1d2fa467741fff8851d1e037fb8bfa3a142281a
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • 6a60c84971628380d91b6f84.eml
    .eml 204KB
  • email-html-2.txt
    .html 18KB
  • email-plain-1.txt
    3KB
  • image.png
    .jpg 107KB

6a60c84971628380d91b6f84.eml

  • SHA256 665b4c47ed302a26cfc1f73eb1d2fa467741fff8851d1e037fb8bfa3a142281a
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

[email protected]

Date

Wed, 22 Jul 2026 12:34:08 +0000

Subject

=?Windows-1252?Q?[External_Email]_Invitation_=E0_soumettre_une_propositio?= =?Windows-1252?Q?n_=96_Projet_=E0_venir?=

Content-Type

multipart/related; boundary="_008_PAYP264MB4476569E41A951BC934393DB83C12PAYP264MB4476FRAP_"; type="multipart/alternative"

Received

from MRZP264MB3193.FRAP264.PROD.OUTLOOK.COM (2603:10a6:501:1a::14) by MR1P264MB2594.FRAP264.PROD.OUTLOOK.COM with HTTPS; Wed, 22 Jul 2026 12:34:22 +0000

from MR1P264CA0187.FRAP264.PROD.OUTLOOK.COM (2603:10a6:501:58::20) by MRZP264MB3193.FRAP264.PROD.OUTLOOK.COM (2603:10a6:501:1a::14) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.245.10; Wed, 22 Jul 2026 12:34:14 +0000

from MR1PEPF00000D59.FRAP264.PROD.OUTLOOK.COM (2603:10a6:501:58:cafe::42) by MR1P264CA0187.outlook.office365.com (2603:10a6:501:58::20) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.245.10 via Frontend Transport; Wed, 22 Jul 2026 12:34:14 +0000

from PA5P264CU001.outbound.protection.outlook.com (2a01:111:f403:c20a::) by MR1PEPF00000D59.mail.protection.outlook.com (2603:10a6:508:1::106) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.245.5 via Frontend Transport; Wed, 22 Jul 2026 12:34:14 +0000

from PAYP264MB4476.FRAP264.PROD.OUTLOOK.COM (2603:10a6:102:117::7) by MR0P264MB6761.FRAP264.PROD.OUTLOOK.COM (2603:10a6:501:7c::12) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.245.10; Wed, 22 Jul 2026 12:34:09 +0000

from PAYP264MB4476.FRAP264.PROD.OUTLOOK.COM ([fe80::ddd9:d56a:8d11:9f76]) by PAYP264MB4476.FRAP264.PROD.OUTLOOK.COM ([fe80::ddd9:d56a:8d11:9f76%4]) with mapi id 15.21.0245.009; Wed, 22 Jul 2026 12:34:09 +0000

Received-Spf

Pass (protection.outlook.com: domain of vaxinano.com designates 2a01:111:f403:c20a:: as permitted sender) receiver=protection.outlook.com; client-ip=2a01:111:f403:c20a::; helo=PA5P264CU001.outbound.protection.outlook.com; pr=C

Message-Id

<PAYP264MB4476569E41A951BC934393DB83C12@PAYP264MB4476.FRAP264.PROD.OUTLOOK.COM>

Extracted URLs

  • file http://google.com/

  • file http://linkedin.com/

  • file http://twitter.com/

  • file http://www.vaxinano.com/

  • file https://senaesis.com/polo