General

  • Target
    mohmansour_2026_07_23_attch_1_of_1.eml
  • Size 94KB
  • Sample260723-kabs8athqa
  • SHA256 e9c3f227f995f402dd0d5110a2a05ddf36bfd8e4b13603fc4bc146ee85eb68e0
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • mohmansour_2026_07_23_attch_1_of_1.eml
    .eml 94KB
  • email-html-2.txt
    .html 10KB
  • email-plain-1.txt
    2KB
  • image001.png
    .png 40KB
  • image002.png
    .png 8KB

mohmansour_2026_07_23_attch_1_of_1.eml

  • SHA256 e9c3f227f995f402dd0d5110a2a05ddf36bfd8e4b13603fc4bc146ee85eb68e0
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

In-Reply-To

AU1P273MB2014F04A87CEBED6F37E1D2FC0C22@AU1P273MB2014.AREP273.PROD.OUTLOOK.COM

Return-Path

[email protected]

Date

Tue, 21 Jul 2026 06:16:22 +0000

Subject

Support Service Policy

Content-Type

multipart/related; boundary="_005_AU1P273MB20141507589975922CE70EC6C0C22AU1P273MB2014AREP_"; type="multipart/alternative"

Received

from EDC-PD-MBX-034.adhsc.seha.ae (10.100.145.19) by EDC-PD-MBX-035.adhsc.seha.ae (10.100.145.20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.2562.43 via Mailbox Transport; Tue, 21 Jul 2026 10:17:25 +0400

from EDC-PD-MBX-039.adhsc.seha.ae (10.100.145.24) by EDC-PD-MBX-034.adhsc.seha.ae (10.100.145.19) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.2562.43; Tue, 21 Jul 2026 10:16:25 +0400

from AU1P273CU002.outbound.protection.outlook.com (172.16.2.47) by SMTP.seha.ae (10.100.145.24) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.2562.43 via Frontend Transport; Tue, 21 Jul 2026 10:16:25 +0400

from AU1P273MB2014.AREP273.PROD.OUTLOOK.COM (2603:1086:200:57::5) by AU1P273MB2476.AREP273.PROD.OUTLOOK.COM (2603:1086:200:76::6) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.223.18; Tue, 21 Jul 2026 06:16:22 +0000

from AU1P273MB2014.AREP273.PROD.OUTLOOK.COM ([fe80::14b:d68e:e716:ae13]) by AU1P273MB2014.AREP273.PROD.OUTLOOK.COM ([fe80::14b:d68e:e716:ae13%5]) with mapi id 15.21.0223.017; Tue, 21 Jul 2026 06:16:22 +0000

Message-Id

<AU1P273MB20141507589975922CE70EC6C0C22@AU1P273MB2014.AREP273.PROD.OUTLOOK.COM>

Extracted URLs

  • file https://url.uk.m.mimecastprotect.com/s/R_K7CymmAH994rGfZfwfxabni?domain=portal.seha.ae