Overview

overview

3

Static

static

1

lalbdour_2..._1.eml

windows10-2004-x64

1

email-html-1.html

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    lalbdour_2026_07_27_attch_1_of_1.eml
  • Size 22KB
  • Sample260727-e9mrwagr4x
  • SHA256 8aff51c3ba676d3bfa84867b5554bd1d041c2856585155b5f774029549831886
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • lalbdour_2026_07_27_attch_1_of_1.eml
    .eml 22KB
  • email-html-1.txt
    .html 18KB

lalbdour_2026_07_27_attch_1_of_1.eml

  • SHA256 8aff51c3ba676d3bfa84867b5554bd1d041c2856585155b5f774029549831886
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Sender

Laila from GoChat <[email protected]>

Return-Path

[email protected]

Date

Wed, 22 Jul 2026 15:08:55 +0400

Subject

[EXTERNAL] Free HD group video and voice calls

Content-Type

multipart/mixed; boundary="----=_Part_26229600_777184732.1784718535796"

Received

from EDC-PD-MBX-030.adhsc.seha.ae (10.100.145.15) by EDC-PD-MBX-039.adhsc.seha.ae (10.100.145.24) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.2562.43 via Mailbox Transport; Wed, 22 Jul 2026 19:14:40 +0400

from EDC-PD-MBX-031.adhsc.seha.ae (10.100.145.16) by EDC-PD-MBX-030.adhsc.seha.ae (10.100.145.15) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.2562.43; Wed, 22 Jul 2026 19:14:40 +0400

from EDC-PD-FMAIL-001.seha.ae (172.16.2.46) by SMTP.seha.ae (10.100.145.16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.2562.43 via Frontend Transport; Wed, 22 Jul 2026 19:14:40 +0400

from mail-p4.campaign.etisalat.ae (mail-p4.campaign.etisalat.ae [217.165.211.146]) by EDC-PD-FMAIL-001.seha.ae with ESMTPS id 66MFEbWS010542-66MFEbWW010542 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO) for <[email protected]>; Wed, 22 Jul 2026 19:14:40 +0400

from dkim-sign.mail-p4.emirates.net.ae by mail-p4.emirates.net.ae (I&ES Mail Server 4.2) id <[email protected]> for [email protected]; Wed, 22 Jul 2026 16:03:28 +0400 (+04)

from hrc-som-cm-prod-app02 ([172.16.219.10]) by mail-p4.emirates.net.ae (I&ES Mail Server 4.2) with ESMTP id <[email protected]> for [email protected]; Wed, 22 Jul 2026 15:08:55 +0400 (+04)

Message-Id

<1525275180.C.1784718535796.JavaMail.ccm@hrc-som-cm-prod-app02>

Extracted URLs

  • file https://url.uk.m.mimecastprotect.com/s/-7S9CXMMXfpJpzwUVhkfWlZju?domain=campaign.etisalat.ae

  • file https://url.uk.m.mimecastprotect.com/s/0kMRC399rILBLEnFYCPfQDpYh?domain=youtube.com

  • file https://url.uk.m.mimecastprotect.com/s/2H8SCZWWGFOGOpJfysNfB_ulj?domain=gochat.go.link

  • file https://url.uk.m.mimecastprotect.com/s/2i87C922Auo1opGf2UlfqSfeb?domain=etisalat.ae

  • file https://url.uk.m.mimecastprotect.com/s/515EC600xhQDQB5ijIGf5_l_D?domain=play.google.com

  • file https://url.uk.m.mimecastprotect.com/s/7WD2C5WWwFqvqDBi4HBfkHFM2?domain=apps.apple.com

  • file https://url.uk.m.mimecastprotect.com/s/9Xj0C899zInrnKocKTkfyatpB?domain=etisalat.ae

  • file https://url.uk.m.mimecastprotect.com/s/T5_-C499vILoLvXFNFDf4Tjl8?domain=instagram.com

  • file https://url.uk.m.mimecastprotect.com/s/cGOIC299qInjn9McMuxf5IQip?domain=x.com

  • Show all