Resubmissions

14/09/2026, 17:50

260914-wembasfr317

14/09/2026, 06:02

260914-grh23shj6y7

14/09/2026, 05:15

260914-fxt6vsswfw8

30/07/2026, 03:58

260730-ejlrwscn817

06/05/2026, 23:57

260506-3zmk5ags4n7

General

  • Target
    20251217-Invitation to disciplinary hearing - Alleged Serio-13.eml
  • Size 9.0MB
  • Sample260730-ejlrwscn81
  • SHA256 83abb0a51ac33b8a7a3b586fdec818b99a9df7ecd10ef74a9a46d85be21957e9
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

File Explorer

  • 20251217-Invitation to disciplinary hearing - Alleged Serio-13.eml
    .eml 9.0MB
  • Evidence bundle.pdf
    .pdf 6.5MB
  • email-html-2.txt
    .html 18KB
  • email-plain-1.txt
    7KB

20251217-Invitation to disciplinary hearing - Alleged Serio-13.eml

  • SHA256 83abb0a51ac33b8a7a3b586fdec818b99a9df7ecd10ef74a9a46d85be21957e9
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Delivered-To

[email protected]

Return-Path

<[email protected]>

Date

Wed, 17 Dec 2025 10:21:16 +1300

Subject

Invitation to disciplinary hearing - Alleged Serious Misconduct

Content-Type

multipart/mixed; boundary="----=_NextPart_000_090E_01DC6F3E.E2323930"

Received

by 2002:a05:7208:1021:b0:f3:5e6b:21c1 with SMTP id j1csp60999rbn; Tue, 16 Dec 2025 13:22:21 -0800 (PST)

from spx03.mail.isx.net.nz (spx03.mail.isx.net.nz. [111.65.230.110]) by mx.google.com with ESMTPS id 98e67ed59e1d1-34cfdc84fd0si216920a91.54.2025.12.16.13.21.39 for <[email protected]> (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 16 Dec 2025 13:22:18 -0800 (PST)

from omr03.mail.isx.net.nz ([111.65.230.130]) by spx03.mail.isx.net.nz with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from <[email protected]>) id 1vVcch-00ALQt-38; Wed, 17 Dec 2025 10:21:37 +1300

from DESKTOPGCO0UTR (unknown [27.252.166.124]) (Authenticated sender: [email protected]) by omr03.mail.isx.net.nz (Postfix) with ESMTPA id 3F952410DF; Wed, 17 Dec 2025 10:21:17 +1300 (NZDT)

X-Received

by 2002:a05:6a20:5491:b0:366:14ac:8c68 with SMTP id adf61e73a8af0-369afff0f77mr15264939637.62.1765920139461; Tue, 16 Dec 2025 13:22:19 -0800 (PST)

Received-Spf

pass (google.com: domain of [email protected] designates 111.65.230.110 as permitted sender) client-ip=111.65.230.110;

X-Mailer

Microsoft Outlook 16.0

Message-Id

<!&!AAAAAAAAAAAuAAAAAAAAAPQGxRH10YpBsjI41hEvsIYBAMO2jhD3dRHOtM0AqgC7tuYAAAAAAA4AABAAAAAATQOtCRtySqSEqpGcfUIMAQAAAAA=@goldencontracting.co.nz>

Extracted URLs

  • file https://goldencontracting.co.nz/