Overview

overview

1

Static

static

1

Legal Pro ...t.xlsx

windows10-2004-x64

1

Legal Pro ...t.xlsx

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    attachment (1).eml
  • Size 368KB
  • Sample260723-nsdmbace36
  • SHA256 89baa2881c58dd2351be5d251f77abd7fc125c5f2e232dac8311c2d70bebbf41
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • attachment (1).eml
    .eml 368KB
  • Legal Pro Recruitment Document.xlsx
    .xlsx 230KB
  • email-html-2.txt
    .html 5KB
  • email-plain-1.txt
    1KB
  • image.png
    .png 19KB

attachment (1).eml

  • SHA256 89baa2881c58dd2351be5d251f77abd7fc125c5f2e232dac8311c2d70bebbf41
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

[email protected]

Date

Thu, 23 Jul 2026 11:10:38 +0000

Subject

21928 - Legal Pro Recruitment

Content-Type

multipart/mixed; boundary="_006_LO0P265MB2732B7B61F5EBB1E1E9C624BC4C42LO0P265MB2732GBRP_"

Received

from LO0P123MB6204.GBRP123.PROD.OUTLOOK.COM (2603:10a6:600:261::5) by LO4P123MB5073.GBRP123.PROD.OUTLOOK.COM with HTTPS; Thu, 23 Jul 2026 11:11:12 +0000

from YT4PR01CA0124.CANPRD01.PROD.OUTLOOK.COM (2603:10b6:b01:d5::21) by LO0P123MB6204.GBRP123.PROD.OUTLOOK.COM (2603:10a6:600:261::5) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.245.11; Thu, 23 Jul 2026 11:11:11 +0000

from YT4PR01MB11722.CANPRD01.PROD.OUTLOOK.COM (2603:10b6:b01:d5:cafe::3b) by YT4PR01CA0124.outlook.office365.com (2603:10b6:b01:d5::21) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.245.11 via Frontend Transport; Thu, 23 Jul 2026 11:11:10 +0000

from YT4PR01CA0157.CANPRD01.PROD.OUTLOOK.COM (2603:10b6:b01:ac::29) by YT4PR01MB11722.CANPRD01.PROD.OUTLOOK.COM (2603:10b6:b01:165::16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.245.11; Thu, 23 Jul 2026 11:10:52 +0000

from TO1PEPF00005346.CANPRD01.PROD.OUTLOOK.COM (2603:10b6:b01:ac:cafe::14) by YT4PR01CA0157.outlook.office365.com (2603:10b6:b01:ac::29) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.245.11 via Frontend Transport; Thu, 23 Jul 2026 11:10:52 +0000

from eu-smtp-inbound-delivery-1.mimecast.com (91.220.42.227) by TO1PEPF00005346.mail.protection.outlook.com (10.167.241.6) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.270.5 via Frontend Transport; Thu, 23 Jul 2026 11:10:51 +0000

from LO3P265CU004.outbound.protection.outlook.com (mail-uksouthazon11020107.outbound.protection.outlook.com [52.101.196.107]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.3, cipher=TLS_AES_256_GCM_SHA384) id uk-mta-3-gaKLJ42sPzGQa1jvDIBJog-1; Thu, 23 Jul 2026 12:10:45 +0100

from LO0P265MB2732.GBRP265.PROD.OUTLOOK.COM (2603:10a6:600:14b::10) by CWXP265MB5300.GBRP265.PROD.OUTLOOK.COM (2603:10a6:400:1be::6) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.245.11; Thu, 23 Jul 2026 11:10:38 +0000

from LO0P265MB2732.GBRP265.PROD.OUTLOOK.COM ([fe80::cbe2:37e0:3fbf:6b99]) by LO0P265MB2732.GBRP265.PROD.OUTLOOK.COM ([fe80::cbe2:37e0:3fbf:6b99%5]) with mapi id 15.21.0245.010; Thu, 23 Jul 2026 11:10:38 +0000

Received-Spf

Fail (protection.outlook.com: domain of legalprorecruitment.com does not designate 91.220.42.227 as permitted sender) receiver=protection.outlook.com; client-ip=91.220.42.227; helo=eu-smtp-inbound-delivery-1.mimecast.com;

Message-Id

<LO0P265MB2732B7B61F5EBB1E1E9C624BC4C42@LO0P265MB2732.GBRP265.PROD.OUTLOOK.COM>