Overview

overview

3

Static

static

1

Message.eml

windows10-2004-x64

1

Message.eml

windows11-ltsc_2024-x64

1

TCEQ.png

windows10-2004-x64

1

TCEQ.png

windows11-ltsc_2024-x64

1

email-html-2.html

windows10-2004-x64

3

email-html-2.html

windows11-ltsc_2024-x64

3

email-plain-1.txt

windows10-2004-x64

1

email-plain-1.txt

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    Message.eml
  • Size 43KB
  • Sample260723-rvzjcaek9v
  • SHA256 345e496333688a54950d882c87d7b69890a173c39d829ed0d030818896416417
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • Message.eml
    .eml 43KB
  • TCEQ.png
    .png 21KB
  • email-html-2.txt
    .html 6KB
  • email-plain-1.txt
    2KB

Message.eml

  • SHA256 345e496333688a54950d882c87d7b69890a173c39d829ed0d030818896416417
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

In-Reply-To

FR0P281MB3241660BDA8035C16E9B1BF783C02@FR0P281MB3241.DEUP281.PROD.OUTLOOK.COM

Date

Thu, 23 Jul 2026 13:44:38 +0000

Subject

FW: Unable to Connect to the Test System

Content-Type

multipart/mixed; boundary="_004_DM6PR13MB3658AED2D5B8F4EFE39A30C7CAC02DM6PR13MB3658namp_"

Received

from DM6PR13MB3658.namprd13.prod.outlook.com (2603:10b6:5:24c::7) by SJ0PR13MB5269.namprd13.prod.outlook.com (2603:10b6:a03:3e1::9) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.245.11; Thu, 23 Jul 2026 13:44:39 +0000

from DM6PR13MB3658.namprd13.prod.outlook.com ([fe80::21eb:d26f:e1c2:5464]) by DM6PR13MB3658.namprd13.prod.outlook.com ([fe80::21eb:d26f:e1c2:5464%6]) with mapi id 15.21.0245.010; Thu, 23 Jul 2026 13:44:38 +0000

Message-Id

<DM6PR13MB3658AED2D5B8F4EFE39A30C7CAC02@DM6PR13MB3658.namprd13.prod.outlook.com>

Extracted URLs

  • file http://www.kisters.de