Overview

overview

3

Static

static

1

J8L6-D1M2.pdf

windows10-2004-x64

3

J8L6-D1M2.pdf

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    RV Notificacion - 33IH07V.msg
  • Size 27KB
  • Sample260722-sg28ragc45
  • SHA256 63f70d6e8f828fd56d09249e80f0e23b632f6eb186050dad512347b2070297ea
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • RV Notificacion - 33IH07V.msg
    .msg .pdf 27KB
  • J8L6-D1M2.pdf
    .pdf 4KB

RV Notificacion - 33IH07V.msg

  • SHA256 63f70d6e8f828fd56d09249e80f0e23b632f6eb186050dad512347b2070297ea
  • MD5 SHA1 SHA512 SSDEEP TLSH
polyglot

Email Headers

In-Reply-To

[email protected]

Date

Tue, 21 Jul 2026 08:50:38 -0600

Subject

RV: Notificacion - 33IH07V

Content-Type

multipart/mixed; boundary="----=_NextPart_000_0013_01DD18EE.014D2920"

Received

from email.ti-america.com by email.ti-america.com with LMTP id deLaKD+HX2okdyAAYtXL3g (envelope-from <[email protected]>); Tue, 21 Jul 2026 08:50:39 -0600

from [177.226.132.117] (port=50428 helo=ARMOPER) by email.ti-america.com with esmtpsa (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.99.4) (envelope-from <[email protected]>) id 1wmBnu-00000008vQG-0Vqc for [email protected]; Tue, 21 Jul 2026 08:50:39 -0600

X-Mailer

Microsoft Outlook 16.0

Message-Id

<[email protected]>

Extracted URLs

  • file http://grupopequena.com

  • file http://ti-america.com