PAGO FACTURA-GABAR ELECTRICA-password(GthBqaJV)[.]zip

PAGO FACTURA-GABAR ELECTRICA-password(GthBqaJV).zip

SHA256 6fd48dc1d3d10720d12a8be2617e0f11a58c6df14088e535c32fb26718617d98
MD5 08043f6da8066a73c0fc369da4943fbf
SHA1 372db96829ce18fbd55ab99814e26b2b26deac8e
SHA512 a5553a02c0eee45e4bea3e24842c3c2868164f62c0a767c5fe396850ab6ff46d6a928b4f86db5172cb42d6c774a4b95c270355e89986899bc4418d52407c94f2
SSDEEP 49152:Q+NsqyL2FJkadmqwSPDFMTVHk6h4msDx8i5zIqA:/z1dmDaFMpHQdn5zIh
TLSH
T1377533C48149D175846C9B73E0AC389CBAE46B06EE4AD9207DCDFF2CA2E7E85B548D11
MD5 SHA1 SHA512 SSDEEP TLSH

Password

GthBqaJV

a1982335-e1d7-4c8e-90ef-12030751872d.eml

SHA256 6c60f746f3923d396b91a4f16e5f93f0839b95ff2811ccb078ecb65ad16abc6b
MD5 50306e372ac926d40c4b19e3ee230e15
SHA1 c47cb861735b4036e73aa260c79851bc9d81d4f0
SHA512 05063d79593bafc16a4891e7cf1dc85e5f87a274a7b9fc1fd6763f0682a50a0636a3aecf27058e97f6cbead025a5683f3a1f782adfff9f1ee0cf3c63564d0e00
SSDEEP 768:+w6On3wkCL90JTyX1TvK2KnUpMcqwiiW8wkElwyWgvKezG6OkukOsrrr6oomooo5:Nng7x0qxIN2oomoooomUXyiML
TLSH
T1D47580EBBFB45DB94C87AE32B95634FAC82879343B238D6BD9421420441632DBF6D44D
MD5 SHA1 SHA512 SSDEEP TLSH

Password

GthBqaJV

Email Headers

From

[email protected]

In-Reply-To

[email protected]

Date

Tue, 21 Jul 2026 15:45:59 +0000

Subject

=?UTF-8?B?Q29ycmVvIEFuw7NtYWxvIHxQQUdPIEZBQ1RVUkEtR0FC?= =?UTF-8?B?QVIgRUxFQ1RSSUNB?=

Content-Type

multipart/mixed; boundary="=_35f3eaffa0c5c7f1c88bc2af5c8e483c"

Received

from bold-cartwright.91-192-10-91.plesk.page (unknown [91.192.10.91]) by inpre01.tmes.trendmicro.com (Trend Micro Email Security) with ESMTPS id A8D0AC00028F; Tue, 21 Jul 2026 15:46:41 +0000 (UTC)

from webmail.varias.info (localhost.localdomain [IPv6:::1]) by bold-cartwright.91-192-10-91.plesk.page (Postfix) with ESMTPSA id 0527F141FA4; Tue, 21 Jul 2026 15:46:00 +0000 (UTC)

Received-Spf

pass (bold-cartwright.91-192-10-91.plesk.page: connection is authenticated)

Message-Id

<[email protected]>

Extracted URLs

file https://ddec1-0-en-ctp.trendmicro.com:443/wis/clicktime/v1/query?url=
file https://ddec1-0-en-ctp.trendmicro.com:443/wis/clicktime/v1/query?url=https%3a%2f%2fwww.gabar.mx&umid=c265ac31-17df-4804-b0ad-23f272738079&rct=1784648802&auth=efcbfc74855c364813732f26614eef024687a3d7-eb81b1bc5a046d3a97a28d9560afca6cec833cb0
file https://linkedin.com/company/gabar-ingenieria
file https://www.facebook.com/Gabar-100111625119925
file https://www.instagram.com/gabar.ingenieria

Pago Ofix Gabar $5,217.70.tar

SHA256 b79c727f89493db2a49f96e02a19bb20e4cc35eea630472455c013fc1cb604d8
MD5 752330699219dabbc9128f112f86803f
SHA1 27994f3c909c833960e5a9df3f27a695fb7c398a
SHA512 7e0bf30c511f2ac77a9d1eeb5ef29ec4011d0d5d14dfbb9a1aee29b6015c7415abd7816f059522125e61e9846e602f8e882c06819961638bf8c0abdd17a5c217
SSDEEP 192:gea8cnSZZRXmbMeDCIqUl8C0/s/05KCW/HW/eh8cnWOWcInOWcD8CJOriZpnWJxq:YCD/s/V8C0d0x
TLSH
T1494554AC3F2465F6D5C7A6E36484C5510AFB0074BDF3BE722D1B08D4E7968B2909AE43
MD5 SHA1 SHA512 SSDEEP TLSH

Password

GthBqaJV

Pago Ofix Gabar $5,217.70.vbs

SHA256 14635bbca8f3850c1b1287abd3908e513033580e727e73aa2e51874d5a426f75
MD5 b853f9182389e21e8e850329eb292eeb
SHA1 26ad3886cf5c1ee6c653af5d2dc8e87cecefa3c4
SHA512 a06436d8c9caa8039068f91dab79e061ef001b13cfb3735434f03376278e9e98d61184a61ba6a1121dfac8e04bfee728a67263ebb5fa62c22bcc25c605d35f5a
SSDEEP 192:Oa8cnSZZRXmbMeDCIqUl8C0/s/05KCW/HW/eh8cnWOWcInOWcD8CJOriZpnWJxt1:lCD/s/V8C0d0xI
TLSH
T19D4553AC3F2465F6D5C7A6D36484C5510AFB0074BDF3BE722D1B08D4E7968B2A09AE43
MD5 SHA1 SHA512 SSDEEP TLSH

email-html-2.txt

SHA256 17b52c76d1d7fa368de2cf8d454d679b1b2a0a2d99a06639d3816cf602ce882d
MD5 a0a5ca555c052a723f0db8af934847d0
SHA1 f96628076e7f1965b0df2bdb22270d7b524b73b3
SHA512 c5e2f1bb2be08fb9fe38747059db788668d7ca4ee073c220539af303d0e61b21816f5432a34cafb0fa5a0ef890ff4d88174f282a5134997f76ea542efd93cf1f
SSDEEP 384:6PF00miay+IffWI9tcpxMXM/M2PWEAVoytVQEYp6ATTwBL0BvcWzhvIyUZZNZZZP:6PF09IHWI9tcpxyWvPWEAVoytVQEYp6p
TLSH
T1A1722E52EA423D1AC17A88F4F43757EE1080A0948341C9A0EBF76A677EC587517EA3FD
MD5 SHA1 SHA512 SSDEEP TLSH

email-plain-1.txt

SHA256 6ac92700b79fac4da3813d1dcd3d75e83a08a98fa179ec49ab1d52f259429c38
MD5 ed323c6e0787c27e89a50b5dbac7d491
SHA1 dd4be134f166b7cd1f3533867c0e4a356863acb6
SHA512 99d7cf2d32b8f500a8173ee65e068c5ff548701a33fd2998a1a7b8866e24ef11721e26409b7ca797d6088a1a95cf867734502cfd05d38c6feee925bdccf4eae6
TLSH
T1D341873A8EC60967A15142C5D982D17FF2810049704DD5C6B4DA036F12C51EDD59EBDC
MD5 SHA1 SHA512 TLSH

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer