Overview

overview

8

Static

static

1

XyVgT78Jsz...3Z.eml

windows10-2004-x64

1

XyVgT78Jsz...3Z.eml

windows11-ltsc_2024-x64

8

email-html-2.html

windows10-2004-x64

3

email-html-2.html

windows11-ltsc_2024-x64

3

email-plain-1.txt

windows10-2004-x64

1

email-plain-1.txt

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    XyVgT78JszJYCXEfmFhMJx1n5zLNaOKj_2026-07-29T15_19_05.963Z.eml
  • Size 110KB
  • Sample260729-sqffcaam7v
  • SHA256 4ec62b7f02b5d9fdafb5567688ca855fca533d37bdb9836af33604be145b847e
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • XyVgT78JszJYCXEfmFhMJx1n5zLNaOKj_2026-07-29T15_19_05.963Z.eml
    .eml 110KB
  • email-html-2.txt
    .html 78KB
  • email-plain-1.txt
    10KB

XyVgT78JszJYCXEfmFhMJx1n5zLNaOKj_2026-07-29T15_19_05.963Z.eml

  • SHA256 4ec62b7f02b5d9fdafb5567688ca855fca533d37bdb9836af33604be145b847e
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

b-1_2hbj6o4goizexnaze2tm6c5oyq-v6l06pt6fxvfogww8@bouncing.sam.ethos.org.br

Date

Mon, 27 Jul 2026 20:00:22 +0000

Subject

Reserve a data | Conversa com =?utf-8?b?TGlkZXJhbsOnYXMg4oCTIDHCug==?= de setembro

Content-Type

multipart/alternative; boundary="=-HKNGDGHT/CfCXNP26dZBzw=="

Received

from DB9PR02MB8820.eurprd02.prod.outlook.com (2603:10a6:10:3df::7) by DB9PR02MB8842.eurprd02.prod.outlook.com with HTTPS; Mon, 27 Jul 2026 20:00:31 +0000

from AM0PR02CA0165.eurprd02.prod.outlook.com (2603:10a6:20b:28d::32) by DB9PR02MB8820.eurprd02.prod.outlook.com (2603:10a6:10:3df::7) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.245.13; Mon, 27 Jul 2026 20:00:28 +0000

from AMS0EPF000001A5.eurprd05.prod.outlook.com (2603:10a6:20b:28d:cafe::25) by AM0PR02CA0165.outlook.office365.com (2603:10a6:20b:28d::32) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.245.13 via Frontend Transport; Mon, 27 Jul 2026 20:00:28 +0000

from mx07-00009201.pphosted.com (185.132.180.224) by AMS0EPF000001A5.mail.protection.outlook.com (10.167.16.232) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.270.5 via Frontend Transport; Mon, 27 Jul 2026 20:00:27 +0000

from pps.filterd (m0447335.ppops.net [127.0.0.1]) by mx08-00009201.pphosted.com (8.18.1.11/8.18.1.11) with ESMTP id 66RJ2Xp31117630 for <[email protected]>; Mon, 27 Jul 2026 20:00:26 GMT

from mail04.sam.pb-dynmktg.com (mail04.sam.pb-dynmktg.com [191.233.202.3]) by mx08-00009201.pphosted.com (PPS) with ESMTPS id 4fpd4vghfr-1 (version=TLSv1.3 cipher=TLS_AES_256_GCM_SHA384 bits=256 verify=NOT) for <[email protected]>; Mon, 27 Jul 2026 20:00:25 +0000 (GMT)

Received-Spf

Pass (protection.outlook.com: domain of bouncing.sam.ethos.org.br designates 191.233.202.3 as permitted sender) receiver=protection.outlook.com; client-ip=191.233.202.3; helo=mail04.sam.pb-dynmktg.com; pr=C

Message-Id

<[email protected]>

Extracted URLs

  • file http://www.ethos.org.br__;!!P5FZM7ryyeY!WGYegZ4dLMyJpXVlB65HycGmH_sChDjxKQs9lUyCV44cQym26dDCT4ExEyMkZ74S3trq7acvwFNdYpov8elfWnkyKQ$

  • file https://3b9fc2d172864b32b41926a6cf0baec4.101.br.prod.marketingusercontent.com/api/orgs/3b9fc2d1-7286-4b32-b419-26a6cf0baec4/r/kvDaJF2ydE6lLZEPZq8DAA0AAAA?msdynmkt_target=*7B*22TargetUrl*22*3A*22

  • file https://3b9fc2d172864b32b41926a6cf0baec4.101.br.prod.marketingusercontent.com/api/orgs/3b9fc2d1-7286-4b32-b419-26a6cf0baec4/r/kvDaJF2ydE6lLZEPZq8DAA4AAAA?msdynmkt_target=*7B*22TargetUrl*22*3A*22

  • file https://3b9fc2d172864b32b41926a6cf0baec4.101.br.prod.marketingusercontent.com/api/orgs/3b9fc2d1-7286-4b32-b419-26a6cf0baec4/r/kvDaJF2ydE6lLZEPZq8DAA8AAAA?msdynmkt_target=*7B*22TargetUrl*22*3A*22

  • file https://3b9fc2d172864b32b41926a6cf0baec4.101.br.prod.marketingusercontent.com/api/orgs/3b9fc2d1-7286-4b32-b419-26a6cf0baec4/r/kvDaJF2ydE6lLZEPZq8DAAAAAAA?msdynmkt_target=*7B*22TargetUrl*22*3A*22https*253A*252F*252Fwww.ethos.org.br*252F*22*2C*22RedirectOptions*22*3A*7B*226*22*3A*22mktprfbd660cac40b445b18675f6ff386d5ed1eoprf*22*2C*221*22*3Anull*7D*7D&msdynmkt_digest=VnorNzguJUk*2FzN8uNxgNEPJs6QlmC820YIOh789DtT8*3D&msdynmkt_secretVersion=66e0eab861b14ed79183e36602b7d8ae

  • file https://3b9fc2d172864b32b41926a6cf0baec4.101.br.prod.marketingusercontent.com/api/orgs/3b9fc2d1-7286-4b32-b419-26a6cf0baec4/r/kvDaJF2ydE6lLZEPZq8DAAIAAAA?msdynmkt_target=*7B*22TargetUrl*22*3A*22https*253A*252F*252Fwww.ethos.org.br*252Finscricao-evento*252F*253Fid*253D1535*22*2C*22RedirectOptions*22*3A*7B*226*22*3A*22mktprfbd660cac40b445b18675f6ff386d5ed1eoprf*22*2C*221*22*3Anull*7D*7D&msdynmkt_digest=jcUUSXyKAc*2FXE5OAbKGaRbXTsygKKMWevyRO*2BW0mRU8*3D&msdynmkt_secretVersion=66e0eab861b14ed79183e36602b7d8ae

  • file https://3b9fc2d172864b32b41926a6cf0baec4.101.br.prod.marketingusercontent.com/api/orgs/3b9fc2d1-7286-4b32-b419-26a6cf0baec4/r/kvDaJF2ydE6lLZEPZq8DAAMAAAA?msdynmkt_target=*7B*22TargetUrl*22*3A*22https*253A*252F*252Fwww.ethos.org.br*252F*22*2C*22RedirectOptions*22*3A*7B*226*22*3A*22mktprfbd660cac40b445b18675f6ff386d5ed1eoprf*22*2C*221*22*3Anull*7D*7D&msdynmkt_digest=VnorNzguJUk*2FzN8uNxgNEPJs6QlmC820YIOh789DtT8*3D&msdynmkt_secretVersion=66e0eab861b14ed79183e36602b7d8ae

  • file https://3b9fc2d172864b32b41926a6cf0baec4.101.br.prod.marketingusercontent.com/api/orgs/3b9fc2d1-7286-4b32-b419-26a6cf0baec4/r/kvDaJF2ydE6lLZEPZq8DAAQAAAA?msdynmkt_target=*7B*22TargetUrl*22*3A*22https*253A*252F*252Fwww.instagram.com*252Finstituto_ethos*252F*22*2C*22RedirectOptions*22*3A*7B*225*22*3Anull*2C*221*22*3Anull*7D*7D&msdynmkt_digest=PQUWPNkeDL0chzenS0U9ppDxv8QOsx6DHKaVJG7zA8A*3D&msdynmkt_secretVersion=66e0eab861b14ed79183e36602b7d8ae

  • file https://3b9fc2d172864b32b41926a6cf0baec4.101.br.prod.marketingusercontent.com/api/orgs/3b9fc2d1-7286-4b32-b419-26a6cf0baec4/r/kvDaJF2ydE6lLZEPZq8DAAUAAAA?msdynmkt_target=*7B*22TargetUrl*22*3A*22https*253A*252F*252Fwww.linkedin.com*252Fcompany*252Finstituto-ethos*252F*22*2C*22RedirectOptions*22*3A*7B*225*22*3Anull*2C*221*22*3Anull*7D*7D&msdynmkt_digest=Lw6*2FrwOHlKNtL*2BTGJ9p*2BeapOGG5mKg1L5yxXhgaqoAM*3D&msdynmkt_secretVersion=66e0eab861b14ed79183e36602b7d8ae

  • Show all