General

  • Target
    Message.eml
  • Size 627KB
  • Sample260723-stsj3sfj5x
  • SHA256 0d4e359c57b6a8253e6d4971923978db0fba12e354ca9cc5bd5114f4290ccf42
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • Message.eml
    .eml 627KB
  • =?utf-8?B?U09BLVQtbsKwMDc5MjAyNl9iYW5hbmFtb29uLWJyaWRnZW9mZG9uLnhscw==?=
    .xls 173KB
  • email-html-2.txt
    .html 9KB
  • email-plain-1.txt
    328B
  • image.png
    .png 180KB

Message.eml

  • SHA256 0d4e359c57b6a8253e6d4971923978db0fba12e354ca9cc5bd5114f4290ccf42
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Date

Tue, 14 Jul 2026 11:09:18 +0000

Subject

SOA-0792026_bananamoon-bridgeofdon

Content-Type

multipart/mixed; boundary="_007_DB7PR02MB517810B6F9754878062AF87BB8F92DB7PR02MB5178eurp_"

Received

from AS9P250CA0003.EURP250.PROD.OUTLOOK.COM (2603:10a6:20b:532::9) by CW1P265MB7455.GBRP265.PROD.OUTLOOK.COM (2603:10a6:400:215::8) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.223.9; Tue, 14 Jul 2026 11:09:48 +0000

from AM3PEPF00009B9D.eurprd04.prod.outlook.com (2603:10a6:20b:532:cafe::2d) by AS9P250CA0003.outlook.office365.com (2603:10a6:20b:532::9) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.223.10 via Frontend Transport; Tue, 14 Jul 2026 11:09:48 +0000

from MRWPR03CU001.outbound.protection.outlook.com (2a01:111:f403:c207::3) by AM3PEPF00009B9D.mail.protection.outlook.com (2603:10a6:20f:fff4:0:1:0:6) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.223.9 via Frontend Transport; Tue, 14 Jul 2026 11:09:45 +0000

from DU2P251CA0022.EURP251.PROD.OUTLOOK.COM (2603:10a6:10:230::20) by AM7PR02MB6034.eurprd02.prod.outlook.com (2603:10a6:20b:18f::20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.202.18; Tue, 14 Jul 2026 11:09:37 +0000

from DB1PEPF000509E4.eurprd03.prod.outlook.com (2603:10a6:10:230:cafe::77) by DU2P251CA0022.outlook.office365.com (2603:10a6:10:230::20) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.202.20 via Frontend Transport; Tue, 14 Jul 2026 11:09:35 +0000

from uk2.smtp.exclaimer.net (51.141.5.228) by DB1PEPF000509E4.mail.protection.outlook.com (10.167.242.54) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.223.9 via Frontend Transport; Tue, 14 Jul 2026 11:09:25 +0000

from AM0PR07CU002.outbound.protection.outlook.com (40.93.65.65) by uk2.smtp.exclaimer.net (51.141.5.228) with Exclaimer Signature Manager ESMTP Proxy uk2.smtp.exclaimer.net (tlsversion=TLS12, tlscipher=TLS_DIFFIEHELLMAN_WITH_AES256_NONE); Tue, 14 Jul 2026 11:09:35 +0000

from DB7PR02MB5178.eurprd02.prod.outlook.com (2603:10a6:10:76::29) by PA6PR02MB10788.eurprd02.prod.outlook.com (2603:10a6:102:3d9::22) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.202.18; Tue, 14 Jul 2026 11:09:18 +0000

from DB7PR02MB5178.eurprd02.prod.outlook.com ([fe80::a337:8789:1d09:2326]) by DB7PR02MB5178.eurprd02.prod.outlook.com ([fe80::a337:8789:1d09:2326%6]) with mapi id 15.21.0202.014; Tue, 14 Jul 2026 11:09:18 +0000

Received-Spf

Fail (protection.outlook.com: domain of bananamoon-bridgeofdon.co.uk does not designate 51.141.5.228 as permitted sender) receiver=protection.outlook.com; client-ip=51.141.5.228; helo=uk2.smtp.exclaimer.net;

Message-Id

<DB7PR02MB517810B6F9754878062AF87BB8F92@DB7PR02MB5178.eurprd02.prod.outlook.com>