General

  • Target
    01b83a7a-4b79-c41e-004e-f3f4fd2a7369.eml
  • Size 302KB
  • Sample260730-ba65pahf83
  • SHA256 59a6767304972336a9295a7beceea92c8a6b81e1d4c789e0aced5f5dd16c71f1
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • 01b83a7a-4b79-c41e-004e-f3f4fd2a7369.eml
    .eml 302KB
  • W9.pdf
    .pdf 118KB
  • email-plain-1.txt
    1KB
  • lNV_R-182-01.pdf
    .pdf 94KB

01b83a7a-4b79-c41e-004e-f3f4fd2a7369.eml

  • SHA256 59a6767304972336a9295a7beceea92c8a6b81e1d4c789e0aced5f5dd16c71f1
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

bounces+[email protected]

Date

Wed, 29 Jul 2026 19:25:49 +0000 (UTC)

Subject

Fw: lNV-R-182-01

Content-Type

multipart/mixed; boundary="--_NmP-35b42c5902f9d53d-Part_1"

Received

from IA2PR18MB6032.namprd18.prod.outlook.com (2603:10b6:208:4b8::22) by SJ0PR18MB4089.namprd18.prod.outlook.com with HTTPS; Wed, 29 Jul 2026 19:26:51 +0000

from CH2PR11CA0030.namprd11.prod.outlook.com (2603:10b6:610:54::40) by IA2PR18MB6032.namprd18.prod.outlook.com (2603:10b6:208:4b8::22) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.270.12; Wed, 29 Jul 2026 19:25:49 +0000

from DM2PEPF00003FC3.namprd04.prod.outlook.com (2603:10b6:610:54:cafe::a0) by CH2PR11CA0030.outlook.office365.com (2603:10b6:610:54::40) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.270.13 via Frontend Transport; Wed, 29 Jul 2026 19:25:49 +0000

from wrqvkqqp.outbound-mail.sendgrid.net (149.72.20.67) by DM2PEPF00003FC3.mail.protection.outlook.com (10.167.23.21) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.270.5 via Frontend Transport; Wed, 29 Jul 2026 19:25:49 +0000

by recvd-546cc58b87-jqr5c with SMTP id recvd-546cc58b87-jqr5c-1-6A6A53BC-51 2026-07-29 19:25:48.978818315 +0000 UTC m=+88512.411710445

from [127.0.0.1] (unknown) by geopod-ismtpd-10 (SG) with ESMTP id W_m9UopEQ0WKn7zvuq16NQ for <[email protected]>; Wed, 29 Jul 2026 19:25:48.551 +0000 (UTC)

Received-Spf

Pass (protection.outlook.com: domain of em3494.akiba-k.com designates 149.72.20.67 as permitted sender) receiver=protection.outlook.com; client-ip=149.72.20.67; helo=wrqvkqqp.outbound-mail.sendgrid.net; pr=C

Message-Id

<[email protected]>