Overview

overview

4

Static

static

1

Completed ...df.msg

windows10-2004-x64

4

Completed ...df.msg

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    Completed Complete with Docusign City_of_St._Cloud_FY_2026-2027_Funding_Agreement.pdf.msg
  • Size 68KB
  • Sample260727-swnc5shk21
  • SHA256 f61cac881f8cb1949272a98a834711dcc7175150e3a367ce596d7f383db6d9f3
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • Completed Complete with Docusign City_of_St._Cloud_FY_2026-2027_Funding_Agreement.pdf.msg
    .msg 68KB

Completed Complete with Docusign City_of_St._Cloud_FY_2026-2027_Funding_Agreement.pdf.msg

  • SHA256 f61cac881f8cb1949272a98a834711dcc7175150e3a367ce596d7f383db6d9f3
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

010f019fa3ac14e7-63cf7497-26ad-46ec-a8c4-d0d3eb3d7199-000000@mail11.docusign.net

Date

Mon, 27 Jul 2026 13:03:11 +0000

Subject

=?UTF-8?B?Q29tcGxldGVkOiBDb21wbGV0ZSB3aXRoIERvY3VzaWduOiBDaXR5?= =?UTF-8?B?X29mX1N0Ll9DbG91ZF9GWV8yMDI2LTIwMjdfRnVuZGluZ19BZ3Jl?= =?UTF-8?B?ZW1lbnQucGRm?=

Content-Type

multipart/mixed; boundary="----sinikael-?=_1-17851577866720.34118615280586984"

Received

from SJ0PR09MB10778.namprd09.prod.outlook.com (2603:10b6:a03:514::20) by BLAPR09MB7170.namprd09.prod.outlook.com with HTTPS; Mon, 27 Jul 2026 13:03:21 +0000

from BL0PR0901CA0009.namprd09.prod.outlook.com (2603:10b6:208:1c0::19) by SJ0PR09MB10778.namprd09.prod.outlook.com (2603:10b6:a03:514::20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.245.13; Mon, 27 Jul 2026 13:03:14 +0000

from SA2PEPF00002253.namprd09.prod.outlook.com (2603:10b6:208:1c0:cafe::fd) by BL0PR0901CA0009.outlook.office365.com (2603:10b6:208:1c0::19) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.245.13 via Frontend Transport; Mon, 27 Jul 2026 13:03:14 +0000

from dispatch1-us1.ppe-hosted.com (67.231.154.164) by SA2PEPF00002253.mail.protection.outlook.com (10.167.242.135) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.270.5 via Frontend Transport; Mon, 27 Jul 2026 13:03:14 +0000

from a115-136.smtp-out.us-east-2.amazonses.com (a115-136.smtp-out.us-east-2.amazonses.com [54.240.115.136]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by mx1-us1.ppe-hosted.com (PPE Hosted ESMTP Server) with ESMTPS id 3940D980071 for <[email protected]>; Mon, 27 Jul 2026 13:03:12 +0000 (UTC)

Received-Spf

Fail (protection.outlook.com: domain of mail11.docusign.net does not designate 67.231.154.164 as permitted sender) receiver=protection.outlook.com; client-ip=67.231.154.164; helo=dispatch1-us1.ppe-hosted.com;

Message-Id

<010f019fa3ac14e7-63cf7497-26ad-46ec-a8c4-d0d3eb3d7199-000000@us-east-2.amazonses.com>

Extracted URLs

  • file http://Docusign.com

  • file http://schema.org/CreativeWork

  • file http://schema.org/EmailMessage

  • file http://schema.org/ViewAction

  • file http://stcloud.org

  • file https://2jxqrkdd.r.us-east-2.awstrack.me/I0/010f019fa3ac14e7-63cf7497-26ad-46ec-a8c4-d0d3eb3d7199-000000/uCAzRSDE7iinYaFXggRbn7piu5Y=258

  • file https://docucdn-a.akamaihd.net/olive/images/2.98.0/email/emailLogo.png

  • file https://docucdn-a.akamaihd.net/olive/images/2.98.0/email/iconFileWithCheck.png

  • file https://na3.docusign.net/Signing/EmailStart.aspx?a=9a35f451-8a74-84f0-8246-0f6de8d242ec&amp;etti=44&amp;r=d08498cb-a74d-8c94-8212-9f3f82d2a8fe

  • Show all