Statement of Account & Overdue Invoices[.]eml

General

Target
Statement of Account & Overdue Invoices.eml
Size 9KB
Sample260727-w61m1aydpb
SHA256 f2e792715d00024e9d9e519865c0ece7c8576ef92b1ff76b0d84796f918d340a
MD5 15c035d027227f212fe40f893b606d59
SHA1 73803974934178f69e04239f326750758fe75d9f
SHA512 a48623ae65b06d772d53833421b00b68c27252a0f7e6b26d40f15d3ce3a7fe16f34ce3629dbe87be5855ae11fb18de2f33f134ffe2645bdd7e1d4e65a09e1c12
SSDEEP 192:nBo8NEKEw1Rs/mNGg0N5yxrvLfohNV7qf3ZTqyjhoK:Bo8NE29NBayxrzgL1QfoK
TLSH
T17F122C06E7390C0A5A9BF2657C403E0803A01DDDF76FE5D0B42A59AB13ED09C9BDA647
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

Statement of Account & Overdue Invoices.eml

.eml 9KB
email-html-2.txt

.html 1KB
email-plain-1.txt

331B

Statement of Account & Overdue Invoices.eml

SHA256 f2e792715d00024e9d9e519865c0ece7c8576ef92b1ff76b0d84796f918d340a
MD5 15c035d027227f212fe40f893b606d59
SHA1 73803974934178f69e04239f326750758fe75d9f
SHA512 a48623ae65b06d772d53833421b00b68c27252a0f7e6b26d40f15d3ce3a7fe16f34ce3629dbe87be5855ae11fb18de2f33f134ffe2645bdd7e1d4e65a09e1c12
SSDEEP 192:nBo8NEKEw1Rs/mNGg0N5yxrvLfohNV7qf3ZTqyjhoK:Bo8NE29NBayxrzgL1QfoK
TLSH
T17F122C06E7390C0A5A9BF2657C403E0803A01DDDF76FE5D0B42A59AB13ED09C9BDA647
MD5 SHA1 SHA512 SSDEEP TLSH

Password

123

Email Headers

From

[email protected]

Date

Fri, 24 Jul 2026 13:45:40 +0000

Subject

Statement of Account & Overdue Invoices

Content-Type

multipart/alternative; boundary="_000_2cbff34e71ea47b094ccba0d019c9f0eafricellgm_"

Received

from AS8PR03MB8619.eurprd03.prod.outlook.com (2603:10a6:20b:54c::9) by AS4PR03MB8601.eurprd03.prod.outlook.com with HTTPS; Fri, 24 Jul 2026 13:45:47 +0000

from DUZPR01CA0219.eurprd01.prod.exchangelabs.com (2603:10a6:10:4b4::16) by AS8PR03MB8619.eurprd03.prod.outlook.com (2603:10a6:20b:54c::9) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.245.10; Fri, 24 Jul 2026 13:45:43 +0000

from DU2PEPF0001E9C2.eurprd03.prod.outlook.com (2603:10a6:10:4b4:cafe::58) by DUZPR01CA0219.outlook.office365.com (2603:10a6:10:4b4::16) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.245.11 via Frontend Transport; Fri, 24 Jul 2026 13:45:43 +0000

from IT-EXCH-FE-02.africellgm.local (197.148.74.42) by DU2PEPF0001E9C2.mail.protection.outlook.com (10.167.8.71) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.270.5 via Frontend Transport; Fri, 24 Jul 2026 13:45:42 +0000

from IT-EXCH-MBX-02.africellgm.local (10.30.20.102) by IT-EXCH-FE-02.africellgm.local (10.169.0.102) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.1544.4; Fri, 24 Jul 2026 13:45:39 +0000

from IT-EXCH-MBX-02.africellgm.local (10.30.8.102) by IT-EXCH-MBX-02.africellgm.local (10.30.8.102) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.1544.36; Fri, 24 Jul 2026 13:45:40 +0000

from IT-EXCH-MBX-02.africellgm.local ([fe80::fbe9:c576:4695:6c58]) by IT-EXCH-MBX-02.africellgm.local ([fe80::fbe9:c576:4695:6c58%3]) with mapi id 15.02.1544.036; Fri, 24 Jul 2026 13:45:40 +0000

Received-Spf

Pass (protection.outlook.com: domain of africell.gm designates 197.148.74.42 as permitted sender) receiver=protection.outlook.com; client-ip=197.148.74.42; helo=IT-EXCH-FE-02.africellgm.local; pr=C

Message-Id

<[email protected]>

Extracted URLs

file http://www.africell.gm
file https://identity-access-7mdo2kix.atomzilla.com/i5BqKXsI9R/777wVhOpoZPXlA5Mj0VIdZjpVKH3wI

Resubmissions

Sharing