Overview

overview

4

Static

static

1

d505bc24-b...9f.eml

windows10-2004-x64

4

d505bc24-b...9f.eml

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    d505bc24-ba0f-b8af-414b-8f9ec28d2e9f.eml
  • Size 310KB
  • Sample260729-df3essshrf
  • SHA256 ee5ca6155fdce19eaeea267885b16ba725a74e0a4c32a11d315d7e5c735e636d
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • d505bc24-ba0f-b8af-414b-8f9ec28d2e9f.eml
    .eml 310KB
  • email-html-1.txt
    213KB

d505bc24-ba0f-b8af-414b-8f9ec28d2e9f.eml

  • SHA256 ee5ca6155fdce19eaeea267885b16ba725a74e0a4c32a11d315d7e5c735e636d
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

From

CallVoicebot-playback-automatedvoic.noteca|activity=VIEW&eid=MXHJVDJHKVCBDKJSVKJVKJSBCDKJDBISBCKJBKJBSCKJBKJBSKJBCJKBSDKJBDKJBSDSVVVHJ29t&tok=MjkjaGVyaWJlcnRvLmJ1amFuZGFAc2Ftc2FyYS5jb20zYmM5NzZkOTI1OWU5MzExODBlYmQ5N2U5NzJlZGVlY2M0N2MuZjkw&ctzvvvvvvvvvvvvvv=America%2FMexico_City&hl=en&[email protected]

Return-Path

CallVoicebot-playback-automatedvoic.noteca|activity=VIEW&eid=MXHJVDJHKVCBDKJSVKJVKJSBCDKJDBISBCKJBKJBSCKJBKJBSKJBCJKBSDKJBDKJBSDSVVVHJ29t&tok=MjkjaGVyaWJlcnRvLmJ1amFuZGFAc2Ftc2FyYS5jb20zYmM5NzZkOTI1OWU5MzExODBlYmQ5N2U5NzJlZGVlY2M0N2MuZjkw&ctzvvvvvvvvvvvvvv=America%2FMexico_City&hl=en&[email protected]

Date

Tue, 28 Jul 2026 18:10:24 +0000

Subject

Incoming Call with +1 *** *** July 28, 2026 06:10:09 PM

Content-Type

multipart/mixed; boundary="===============0175502029653833792=="

Received

from DM6PR18MB3766.namprd18.prod.outlook.com (::1) by BN8PR18MB2548.namprd18.prod.outlook.com with HTTPS; Tue, 28 Jul 2026 18:11:42 +0000

from BY3PR10CA0006.namprd10.prod.outlook.com (2603:10b6:a03:255::11) by DM6PR18MB3766.namprd18.prod.outlook.com (2603:10b6:5:26f::8) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.270.12; Tue, 28 Jul 2026 18:10:36 +0000

from BY1PEPF0001AE1C.namprd04.prod.outlook.com (2603:10b6:a03:255:cafe::29) by BY3PR10CA0006.outlook.office365.com (2603:10b6:a03:255::11) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.270.12 via Frontend Transport; Tue, 28 Jul 2026 18:10:36 +0000

from FR6P281CU001.outbound.protection.outlook.com (2a01:111:f403:da0c::) by BY1PEPF0001AE1C.mail.protection.outlook.com (2603:10b6:a0f:fc02::169) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.270.5 via Frontend Transport; Tue, 28 Jul 2026 18:10:35 +0000

from FR4P281CA0017.DEUP281.PROD.OUTLOOK.COM (2603:10a6:d10:c9::13) by FR4P281MB3589.DEUP281.PROD.OUTLOOK.COM (2603:10a6:d10:d5::5) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.270.12; Tue, 28 Jul 2026 18:10:25 +0000

from FR3PEPF00000486.DEUP281.PROD.OUTLOOK.COM (2603:10a6:d10:c9:cafe::6) by FR4P281CA0017.outlook.office365.com (2603:10a6:d10:c9::13) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.270.12 via Frontend Transport; Tue, 28 Jul 2026 18:10:25 +0000

from [213.210.58.50] (213.210.58.50) by FR3PEPF00000486.mail.protection.outlook.com (10.167.240.6) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.270.5 via Frontend Transport; Tue, 28 Jul 2026 18:10:24 +0000

Received-Spf

Pass (protection.outlook.com: domain of moenner.de designates 2a01:111:f403:da0c:: as permitted sender) receiver=protection.outlook.com; client-ip=2a01:111:f403:da0c::; helo=FR6P281CU001.outbound.protection.outlook.com; pr=C

Fail (protection.outlook.com: domain of moenner.de does not designate 213.210.58.50 as permitted sender) receiver=protection.outlook.com; client-ip=213.210.58.50; helo=[213.210.58.50];

X-Mailer

Microsoft Office Outlook 16.0

Message-Id

<daf50908-e347-456b-8198-4d0b672380d6@FR3PEPF00000486.DEUP281.PROD.OUTLOOK.COM>

Extracted URLs

  • file https://do.pietre-la-rinichi.ro/hold/index.html

  • file https://e.e.mail.realtor.com/c2/1946:6542d143b79683eead62f252:rm202607221900:6514f8e6d57b9f396c0a0edd:1/023f04b3?jwtH=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9&jwtP=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&jwtS=KEAMrpmWL074O6XB4FRt7kTivkLRZXfRiZMmE6AC5pU#app

  • file https://e.e.mail.realtor.com/c2/1946:6542d143b79683eead62f252:rm202607221900:6514f8e6d57b9f396c0a0edd:1/0796ac0a?jwtH=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9&jwtP=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&jwtS=xRk1TdEARXK8kg2i66XcfOWWL1cT6hgS0eRmwbwLwVo#app

  • file https://e.e.mail.realtor.com/c2/1946:6542d143b79683eead62f252:rm202607221900:6514f8e6d57b9f396c0a0edd:1/0c35bc9b?jwtH=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9&jwtP=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&jwtS=0FGZUHbkfXWpdnemV2Y48dlrQiXr5LK_wXLw3cJFEnc#app

  • file https://e.e.mail.realtor.com/c2/1946:6542d143b79683eead62f252:rm202607221900:6514f8e6d57b9f396c0a0edd:1/10f9b792?jwtH=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9&jwtP=eyJpYXQiOjE3ODQ3NjMyOTgsImNkIjoiLmUubWFpbC5yZWFsdG9yLmNvbSIsImNlIjo4NjQwMCwidGsiOiJyZWFsdG9yIiwibXRsSUQiOiI2YTYxNTM1MWE1ZjNjZjEwMTMwOWUyYzQiLCJsaW5rVXJsIjoiaHR0cHM6Ly93d3cucmVhbHRvci5jb20vP2NpZD1lbWxfZnJhY3RhbFBDQ29udHJvbEdyb3VwXzE5NDY6NjU0MmQxNDNiNzk2ODNlZWFkNjJmMjUyOnJtMjAyNjA3MjIxOTAwX01hcmtldGluZ19CdXllcl9EYWlseV9QcmljZUNoYW5nZXMmZGVlcGxpbmtJZGVudGl0eUlkPTVmODM4ODRmZWMwMWYzMDBlZWMyMmVjYiJ9&jwtS=aApw3cUq173Iz9JfDB0oQ75FJ4uEsOaAmzEAHmnmZHM

  • file https://e.e.mail.realtor.com/c2/1946:6542d143b79683eead62f252:rm202607221900:6514f8e6d57b9f396c0a0edd:1/126c0032?jwtH=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9&jwtP=eyJpYXQiOjE3ODQ3NjMyOTgsImNkIjoiLmUubWFpbC5yZWFsdG9yLmNvbSIsImNlIjo4NjQwMCwidGsiOiJyZWFsdG9yIiwibXRsSUQiOiI2YTYxNTM1MWE1ZjNjZjEwMTMwOWUyYmUiLCJsaW5rVXJsIjoiaHR0cHM6Ly93d3cucmVhbHRvci5jb20vcmVhbGVzdGF0ZWFuZGhvbWVzLWRldGFpbC8xNjAwLUUtMTN0aC1TdF9PZGVzc2FfVFhfNzk3NjFfTTczNTU2LTA1Mjk0P2NybV9zdWJtaXRfbGVhZD10cnVlJmNpZD1lbWxfZnJhY3RhbFBDQ29udHJvbEdyb3VwXzE5NDY6NjU0MmQxNDNiNzk2ODNlZWFkNjJmMjUyOnJtMjAyNjA3MjIxOTAwX01hcmtldGluZ19CdXllcl9EYWlseV9QcmljZUNoYW5nZXNfYnV5ZXJQcmljZUNoYW5nZXMmZGVlcGxpbmtJZGVudGl0eUlkPTVmODM4ODRmZWMwMWYzMDBlZWMyMmVjYiJ9&jwtS=TFXmXrqTTSeZpGo5uRLVpjEdup04pwnpIaTnsohaPnY#app

  • file https://e.e.mail.realtor.com/c2/1946:6542d143b79683eead62f252:rm202607221900:6514f8e6d57b9f396c0a0edd:1/145fa8ae?jwtH=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9&jwtP=eyJpYXQiOjE3ODQ3NjMyOTgsImNkIjoiLmUubWFpbC5yZWFsdG9yLmNvbSIsImNlIjo4NjQwMCwidGsiOiJyZWFsdG9yIiwibXRsSUQiOiI2YTYxNTM1MTVkMzI1NWZhMzMwYTA4YTAiLCJsaW5rVXJsIjoiaHR0cHM6Ly93d3cucmVhbHRvci5jb20vcmVhbGVzdGF0ZWFuZGhvbWVzLXNlYXJjaC83OTc2MS9zaG93LXByaWNlLXJlZHVjZWQ_Y2lkPWVtbF9mcmFjdGFsUENDb250cm9sR3JvdXBfMTk0Njo2NTQyZDE0M2I3OTY4M2VlYWQ2MmYyNTI6cm0yMDI2MDcyMjE5MDBfTWFya2V0aW5nX0J1eWVyX0RhaWx5X1ByaWNlQ2hhbmdlcyZkZWVwbGlua0lkZW50aXR5SWQ9NWY4Mzg4NGZlYzAxZjMwMGVlYzIyZWNiIn0&jwtS=3CMpAH5GdGBJmarIC0mYgIPKgPRBDIOeDd5FTk_xryE#app

  • file https://e.e.mail.realtor.com/c2/1946:6542d143b79683eead62f252:rm202607221900:6514f8e6d57b9f396c0a0edd:1/17693d63?jwtH=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9&jwtP=eyJpYXQiOjE3ODQ3NjMyOTgsImNkIjoiLmUubWFpbC5yZWFsdG9yLmNvbSIsImNlIjo4NjQwMCwidGsiOiJyZWFsdG9yIiwibXRsSUQiOiI2YTYxNTM1MTVkMzI1NWZhMzMwYTA4YTMiLCJsaW5rVXJsIjoiaHR0cHM6Ly93d3cucmVhbHRvci5jb20vcmVhbGVzdGF0ZWFuZGhvbWVzLWRldGFpbC9PZGVzc2FfVFhfNzk3NjVfTTkwNTQyLTg3MDY5P2NpZD1lbWxfZnJhY3RhbFBDQ29udHJvbEdyb3VwXzE5NDY6NjU0MmQxNDNiNzk2ODNlZWFkNjJmMjUyOnJtMjAyNjA3MjIxOTAwX01hcmtldGluZ19CdXllcl9EYWlseV9QcmljZUNoYW5nZXNfYnV5ZXJOZXdDb25zdHJ1Y3Rpb24mZGVlcGxpbmtJZGVudGl0eUlkPTVmODM4ODRmZWMwMWYzMDBlZWMyMmVjYiJ9&jwtS=KxZPjn5gkAu0OR1u3Z6ercMIUnGh5QASWcuxy2_eBi4#app

  • file https://e.e.mail.realtor.com/c2/1946:6542d143b79683eead62f252:rm202607221900:6514f8e6d57b9f396c0a0edd:1/1a545bf4?jwtH=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9&jwtP=eyJpYXQiOjE3ODQ3NjMyOTgsImNkIjoiLmUubWFpbC5yZWFsdG9yLmNvbSIsImNlIjo4NjQwMCwidGsiOiJyZWFsdG9yIiwibXRsSUQiOiI2YTYxNTM1MTgyNzBhMzY5ZjUwMTk1MTUiLCJsaW5rVXJsIjoiaHR0cHM6Ly93d3cucmVhbHRvci5jb20vcmVhbGVzdGF0ZWFuZGhvbWVzLWRldGFpbC8xNDMxLUhhbGlmYXgtQXZlX09kZXNzYV9UWF83OTc2MV9NODAzNjAtNjU5OTY_Y3JtX3N1Ym1pdF9sZWFkPXRydWUmY2lkPWVtbF9mcmFjdGFsUENDb250cm9sR3JvdXBfMTk0Njo2NTQyZDE0M2I3OTY4M2VlYWQ2MmYyNTI6cm0yMDI2MDcyMjE5MDBfTWFya2V0aW5nX0J1eWVyX0RhaWx5X1ByaWNlQ2hhbmdlc19idXllclByaWNlQ2hhbmdlcyZkZWVwbGlua0lkZW50aXR5SWQ9NWY4Mzg4NGZlYzAxZjMwMGVlYzIyZWNiIn0&jwtS=FL6iqgFQFHDeYDYhxDqEsCm0clJhOzn5YJrjgz6XVbA#app

  • Show all