Resubmissions

27/07/2026, 15:08

260727-sjdyyavhkb3

27/07/2026, 15:05

260727-sgj26swset6

General

  • Target
    phish_alert_sp2_2.0.0.0 (1).eml
  • Size 776KB
  • Sample260727-sgj26swset
  • SHA256 cd8b1dc886896ac4da20de6f94fc79e3272d3bffc452b2add0721a33a3ac9b06
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • phish_alert_sp2_2.0.0.0 (1).eml
    .eml 776KB
  • Purchase Quote Review 00007328.pdf
    .pdf 544KB
  • email-html-1.txt
    .html 17KB

phish_alert_sp2_2.0.0.0 (1).eml

  • SHA256 cd8b1dc886896ac4da20de6f94fc79e3272d3bffc452b2add0721a33a3ac9b06
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

[email protected]

Date

Mon, 27 Jul 2026 09:40:05 -0500

Subject

=?UTF-8?B?W0VYVEVSTkFMXSBZb3VyIFF1b3RlIEZyb20gQXhpcyBXYXRlciBU?= =?UTF-8?B?ZWNobm9sb2dpZXM=?=

Content-Type

multipart/mixed; boundary="----sinikael-?=_1-17851636704780.2056519835014169"

Received

from PH0PR16MB5132.namprd16.prod.outlook.com (::1) by PH7PR16MB5589.namprd16.prod.outlook.com with HTTPS; Mon, 27 Jul 2026 14:40:46 +0000

from SJ2P221CA0007.NAMP221.PROD.OUTLOOK.COM (2603:10b6:a03:5db::18) by PH0PR16MB5132.namprd16.prod.outlook.com (2603:10b6:510:29f::12) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.245.13; Mon, 27 Jul 2026 14:40:08 +0000

from MWH0EPF000A6735.namprd04.prod.outlook.com (2603:10b6:a03:5db:cafe::63) by SJ2P221CA0007.outlook.office365.com (2603:10b6:a03:5db::18) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.245.13 via Frontend Transport; Mon, 27 Jul 2026 14:40:08 +0000

from mail-pg1-x52b.google.com (2607:f8b0:4864:20::52b) by MWH0EPF000A6735.mail.protection.outlook.com (2603:10b6:30f:fff5::41b) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.270.5 via Frontend Transport; Mon, 27 Jul 2026 14:40:08 +0000

by mail-pg1-x52b.google.com with SMTP id 41be03b00d2f7-ca913a601fbso2037613a12.3 for <[email protected]>; Mon, 27 Jul 2026 07:40:08 -0700 (PDT)

from 463500743912 named unknown by gmailapi.google.com with HTTPREST; Mon, 27 Jul 2026 09:40:05 -0500

from 463500743912 named unknown by gmailapi.google.com with HTTPREST; Mon, 27 Jul 2026 09:40:05 -0500

X-Received

by 2002:a05:6a21:6d8e:b0:3c3:cc3e:a9 with SMTP id adf61e73a8af0-3c67dae97dbmr8743356637.4.1785163207059; Mon, 27 Jul 2026 07:40:07 -0700 (PDT)

Received-Spf

Pass (protection.outlook.com: domain of axiswater.com designates 2607:f8b0:4864:20::52b as permitted sender) receiver=protection.outlook.com; client-ip=2607:f8b0:4864:20::52b; helo=mail-pg1-x52b.google.com; pr=C

Message-Id

<CAL95WB5G9B+[email protected]>

Extracted URLs

  • file https://aka.ms/LearnAboutSenderIdentification