General

  • Target
    Invitation to disciplinary hearing - Alleged Serious Misconduct.txt
  • Size 9.0MB
  • Sample260724-cp91ka1emb
  • SHA256 4c1b5e471a686f4a5250310ff5a62f72f84697ce7dd198ed846599267b6e1969
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

File Explorer

  • Invitation to disciplinary hearing - Alleged Serious Misconduct.txt
    .eml 9.0MB
  • Evidence bundle.pdf
    .pdf 6.5MB
  • email-html-2.txt
    .html 18KB
  • email-plain-1.txt
    7KB

Invitation to disciplinary hearing - Alleged Serious Misconduct.txt

  • SHA256 4c1b5e471a686f4a5250310ff5a62f72f84697ce7dd198ed846599267b6e1969
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Delivered-To

[email protected]

Return-Path

<[email protected]>

Date

Wed, 17 Dec 2025 10:21:16 +1300

Subject

Invitation to disciplinary hearing - Alleged Serious Misconduct

Content-Type

multipart/mixed; boundary="----=_NextPart_000_090E_01DC6F3E.E2323930"

Received

by 2002:a05:7208:1021:b0:f3:5e6b:21c1 with SMTP id j1csp60999rbn; Tue, 16 Dec 2025 13:22:21 -0800 (PST)

from spx03.mail.isx.net.nz (spx03.mail.isx.net.nz. [111.65.230.110]) by mx.google.com with ESMTPS id 98e67ed59e1d1-34cfdc84fd0si216920a91.54.2025.12.16.13.21.39 for <[email protected]> (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 16 Dec 2025 13:22:18 -0800 (PST)

from omr03.mail.isx.net.nz ([111.65.230.130]) by spx03.mail.isx.net.nz with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from <[email protected]>) id 1vVcch-00ALQt-38; Wed, 17 Dec 2025 10:21:37 +1300

from DESKTOPGCO0UTR (unknown [27.252.166.124]) (Authenticated sender: [email protected]) by omr03.mail.isx.net.nz (Postfix) with ESMTPA id 3F952410DF; Wed, 17 Dec 2025 10:21:17 +1300 (NZDT)

X-Received

by 2002:a05:6a20:5491:b0:366:14ac:8c68 with SMTP id adf61e73a8af0-369afff0f77mr15264939637.62.1765920139461; Tue, 16 Dec 2025 13:22:19 -0800 (PST)

Received-Spf

pass (google.com: domain of [email protected] designates 111.65.230.110 as permitted sender) client-ip=111.65.230.110;

X-Mailer

Microsoft Outlook 16.0

Message-Id

<!&!AAAAAAAAAAAuAAAAAAAAAPQGxRH10YpBsjI41hEvsIYBAMO2jhD3dRHOtM0AqgC7tuYAAAAAAA4AABAAAAAATQOtCRtySqSEqpGcfUIMAQAAAAA=@goldencontracting.co.nz>

Extracted URLs

  • file https://goldencontracting.co.nz/