Overview

overview

3

Static

static

1

phish_aler...1).eml

windows10-2004-x64

1

phish_aler...1).eml

windows11-ltsc_2024-x64

1

email-html-1.html

windows10-2004-x64

3

email-html-1.html

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    phish_alert_sp2_2.0.0.0 (1).eml
  • Size 54KB
  • Sample260723-yp72vsap31
  • SHA256 b4f1d557e797ace29a1e92d9227e8009c390364f5613e0b70213095a0d2d8332
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • phish_alert_sp2_2.0.0.0 (1).eml
    .eml 54KB
  • email-html-1.txt
    .html 39KB

phish_alert_sp2_2.0.0.0 (1).eml

  • SHA256 b4f1d557e797ace29a1e92d9227e8009c390364f5613e0b70213095a0d2d8332
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

[email protected]

Date

Thu, 23 Jul 2026 15:32:22 -0400

Subject

=?UTF-8?B?W0VYVEVSTkFMXSAyMS82NCBQZXJzcGVjdGl2ZXM6IFdoeSBub3Qg?= =?UTF-8?B?c3Bpcml0dWFsaXR5Pw==?=

Content-Type

multipart/mixed; boundary="----sinikael-?=_1-17848365621840.8061210032896998"

Received

from PH0PR16MB7154.namprd16.prod.outlook.com (2603:10b6:510:38f::19) by BYAPR16MB3606.namprd16.prod.outlook.com with HTTPS; Thu, 23 Jul 2026 19:33:07 +0000

from PH7P223CA0017.NAMP223.PROD.OUTLOOK.COM (2603:10b6:510:338::10) by PH0PR16MB7154.namprd16.prod.outlook.com (2603:10b6:510:38f::19) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.245.11; Thu, 23 Jul 2026 19:32:24 +0000

from MW1PEPF0001615C.namprd21.prod.outlook.com (2603:10b6:510:338:cafe::88) by PH7P223CA0017.outlook.office365.com (2603:10b6:510:338::10) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.245.11 via Frontend Transport; Thu, 23 Jul 2026 19:32:24 +0000

from 4f2pug.bf05x.hubspotemail.net (108.179.154.198) by MW1PEPF0001615C.mail.protection.outlook.com (10.167.249.87) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.270.0 via Frontend Transport; Thu, 23 Jul 2026 19:32:23 +0000

by 172.16.92.38 with SMTP id a0cgfhxxtp4xci5xrg2vd7yi9jeu92plutj5h754ami; Thu, 23 Jul 2026 19:32:22 GMT

Received-Spf

Pass (protection.outlook.com: domain of bf05x.hubspotemail.net designates 108.179.154.198 as permitted sender) receiver=protection.outlook.com; client-ip=108.179.154.198; helo=4f2pug.bf05x.hubspotemail.net; pr=C

Message-Id

<1784835138403.64de20cf-85f7-48f4-8cdf-73db43a34aa8@bf05x.hubspotemail.net>

Extracted URLs

  • file https://aka.ms/LearnAboutSenderIdentification

  • file https://hub.2164.net/e3t/Ctc/GH+113/d2T-XB04/VW752s7BsT2nW8YwYWG80DQnTW67tPB75RR_RLN3DlwFK3qgz0W6N1vHY6lZ3n8W6zVPgp2R5GsdW94-RNT657tg-W48Cqm62WkzS-W2pWb4k42h6VQW5MbkXM5zQj5vW2LJ6lm1-0N0LW2j2g7_4vD_h3V_qrLt45N70fW20_BS_3MC928W4p0lxb6V3GXcW2Rhrmy3Y6TGXW9kzTD626cjpBW5Q1RXQ6fpxdMVl4kmp4H5d2nW3hRypz4cN5pyVKX0H05h5k0WW2Bww8k2VG9QRN78q1zzgqtpsW7lHbTW40ShnFW4PCPWL4rhDbvN17mqzC9z0mpW8Bpr6b6S04DKf7p_S7b04

  • file https://hub.2164.net/e3t/Ctc/GH+113/d2T-XB04/VW752s7BsT2nW8YwYWG80DQnTW67tPB75RR_RLN3DlwFq5nR3bW69t95C6lZ3l4W5-n2q77qQwT9W98KGFD1MHqBlW2sr0Wj5nVBl6W7mvwF_3Sfn9FW27WWML6K-GpkW65ZLlv3Yy_yKVW3xgD5gt5KDW62Y59m3MfgnTW4J36fl9jWZYWW5SYp1Y4gxG5sW6qQ38C280lYsW9jCkrf6DThhYW11gYbY8dHgj_W1rmF5W6nYXSgN2y6MgBg2XP1Vv6pGc84z7n4W2JXjcf3ByWmZN5scj6zHZTbJW4sZDG45rVPN-W116j5d80DDjFW2rlhPG3DSgxVW40Ct7_6BC1y9N4c7JnrGdzTMW3zPrG73mY1QMW68Jts-72yQ0hW4kX8pn3C-DR9W7DFQwk220KMpN8bFMGKkzh_lW5d0zr_4msbJtMdfymjPstqMW6NVjzh93B72LW1q5d7F470_Z3W2HPzVR1YY9pzW1n76v24CbLMDW2Tv-698vfGc_V56wlm5vRmBlf278Wtb04

  • file https://hub.2164.net/e3t/Ctc/GH+113/d2T-XB04/VW752s7BsT2nW8YwYWG80DQnTW67tPB75RR_RLN3DlwG03qgz0W7lCdLW6lZ3nkW3QD5PV1fLtGMN6XszyHXqLhfW5hFK8t7p8GKwW1py0c66x0KKmW6WTVJQ51HZQNW49dpty14tgm2W5Xvn4j5zm-cxN5mPg6L-6293W28PnF_4cDLzsVDs1zc7tCZz6W13whBx25sbTqW7hdHrQ7rN0GbW4fXH6J86-xGMW2CSFDf6NCQrxW1J7hc085cDvRW37tb0G31wxKKVvS2Qj1xnhvmW2V7qvJ90Gq8nW6cFKkQ4xxCNNW2JKlgk5v9X-NW6wPR3t6c8lp7W8bpflg4qMXM3W1pg2pd2v5YRxN4RRq51r99rHf8BQ8x004

  • file https://hub.2164.net/e3t/Ctc/GH+113/d2T-XB04/VW752s7BsT2nW8YwYWG80DQnTW67tPB75RR_RLN3DlwGC3qgz0W8wLKSR6lZ3nkVjSQtM1J-KTMW85HVnz2FT3WFW7xM_KX4fL4mkW5sRMB12tSyS3W27TpxC6ZSqM1W26fpVK8YhvbZN4RBL0LdzqTRW95lWFQ6fcqFfW3r7mBz8GSlktW280rKX7VDMx2W5xT_bC42mFhKW7wN-dp2jh3S3W5BShM14XvPFFW4ztmDg4JWxdCW7Tj4Cf3Zmc8BW55P0cq7VgC_JW1sq1F85lnNTgW8Cl_BQ1hvYhTN3vGqBmnV2hcW7dbgWp54M4ZrW6s_Mpv96Q9s2W3sQmP_4X8MzjW1xjPBd651Kl-W7_D3xw7mhn-CW7S-N1B6S4hSFW3bQwmq1thtZVW67TydS4xll3-W5cRC9n4ZhXdsf32Cn4s04

  • file https://hub.2164.net/e3t/Ctc/GH+113/d2T-XB04/VW752s7BsT2nW8YwYWG80DQnTW67tPB75RR_RLN3DlwGj3qgz0W7Y8-PT6lZ3q5W2Jv35q8D3RMVW7SWdLz48Gsq2W8KK0Sg98j-0FW8_jhmG3S_zjWW92M36z1Sr925Vwn1dk6vNXL2W4ZJx1S2nL7jcW9fs3g919kldmW6jR93m69904vW37pspj8WqncYW8Z5pL63H7J1JVBtwm96lShKHW5ZFMY98SVpqvN4wc423CLmNXN9hHnz51KrdFN7S51xFQ3-GJW5ZwPzf8ZBRB8W7WlbQ64VdM9lW7kFvy67Qm756W5znTcF8rsHQTW80QsWJ7V3ftpW5RDCmL1XbJ0PVTsmrS5f3HynW7fSNV11Tg4__W1BDwVr92FkFgW9lzYGR5FkJXHd2gF_v04

  • file https://hub.2164.net/hs/preferences-center/en/direct?data=W2nXS-N30h-SsW4hFvjd2YK3BMW41Rkb2257wDvW1VbSjC4tyKHNW3d2ddc1XhFKCW3F6D3p25m6gVW3ZMXDP2zYTVvW3_s6cw36nNl_W3BNNn-3Zq_yjW2x_dPZ34B0PTW2r5D8T3z24j-W3Y0V8J1Vws5CW36fMJB2MxL1pW2qC8Kj41WVCJW2YtXq-1--_b7W3_H6K721s4BhW4fMCC121rNLwW45FfgS4p8Y0ZW32FXJj1Z0RvqW4mHFgy2r8ZX6W3z9zZK4czkdFW36ff2k3d9NkKW4rffhc2-qSwsW2zHn7W2TKwqjW1XrYQk3LV7p9W4fqgH13by9bCW4fPHTS2WjfmsW38b_xp4hLwN4W3DLTzL3F0t_jW2zFJ4y3LJCfGW4cQGjQ4hHDd9W3BV4tL47Mmh8W3SYgQh2vCdKYW3yN-QL2WPTSZW4frSzl1Xcr4TW2RR6tt364b74W2Yr4Cm3_Gks4W3XTYQQ3dr5L1W1Z0PGk30yMZNW49Swpf3NNYncW32CqLK47KJzkW2RRtNV30Jg_QW4plvGK4mvF9PW49TLSL2vz3VDW3JYHxy3LP7V9W2RLvJH3NDDMnW3jwh4l36B7FxW3GFF__3SzL2gW4fK14L2-vzQqW3QFc5w47Mjt2W1Q4x-12YxtWhW41HRK72-wq-VW1QxH2t2RCQP9W2HSN_b253QgtW2CH-J838nz4NW3gdr1G1W_QF7W3T51ny36CTl8W3D_BWn3brkx3W49TlPy4t645_W4tCcfw36y_6Lf3Fg7D-04&utm_campaign=Thought%20Leadership&utm_source=hs_email&utm_medium=email&utm_content=429809113&_hsenc=p2ANqtz-_PbUBYYjYPrsrkk6A4WDe7xT7tXtunxvSkBKaLJ3SPGIxUvo1DhkfwCib05pze3GZexO6MQ0ZSeRkYzVvl94KdwrxkM41S2EMvSmp8YyUW5jgIMlo&_hsmi=429809113

  • file https://hub.2164.net/hs/preferences-center/en/page?data=W2nXS-N30h-SsW4hFvjd2YK3BMW41Rkb2257wDvW1VbSjC4tyKHNW3d2ddc1XhFKCW3F6D3p25m6gVW3ZMXDP2zYTVvW3_s6cw36nNl_W3BNNn-3Zq_yjW2x_dPZ34B0PTW2r5D8T3z24j-W3Y0V8J1Vws5CW36fMJB2MxL1pW2qC8Kj41WVCJW2YtXq-1--_b7W3_H6K721s4BhW4fMCC121rNLwW45FfgS4p8Y0ZW32FXJj1Z0RvqW4mHFgy2r8ZX6W3z9zZK4czkdFW36ff2k3d9NkKW4rffhc2-qSwsW2zHn7W2TKwqjW1XrYQk3LV7p9W4fqgH13by9bCW4fPHTS2WjfmsW38b_xp4hLwN4W3DLTzL3F0t_jW2zFJ4y3LJCfGW4cQGjQ4hHDd9W3BV4tL47Mmh8W3SYgQh2vCdKYW3yN-QL2WPTSZW4frSzl1Xcr4TW2RR6tt364b74W2Yr4Cm3_Gks4W3XTYQQ3dr5L1W1Z0PGk30yMZNW49Swpf3NNYncW32CqLK47KJzkW2RRtNV30Jg_QW4plvGK4mvF9PW49TLSL2vz3VDW3JYHxy3LP7V9W2RLvJH3NDDMnW3jwh4l36B7FxW3GFF__3SzL2gW4fK14L2-vzQqW3QFc5w47Mjt2W1Q4x-12YxtWhW41HRK72-wq-VW1QxH2t2RCQP9W2HSN_b253QgtW2CH-J838nz4NW3gdr1G1W_QF7W3T51ny36CTl8W3D_BWn3brkx3W49TlPy4t645_W4tCcfw36y_6Lf3Fg7D-04&utm_campaign=Thought%20Leadership&utm_source=hs_email&utm_medium=email&utm_content=429809113&_hsenc=p2ANqtz-_PbUBYYjYPrsrkk6A4WDe7xT7tXtunxvSkBKaLJ3SPGIxUvo1DhkfwCib05pze3GZexO6MQ0ZSeRkYzVvl94KdwrxkM41S2EMvSmp8YyUW5jgIMlo&_hsmi=429809113