General

  • Target
    INC0048141.eml
  • Size 4.4MB
  • Sample260730-laytesvejb
  • SHA256 2470fea77b72806e8a0abaf488429a7481cbf53358ac923ecc3d3df6fc366814
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • INC0048141.eml
    .eml 4.4MB
  • BidBottAI Product Presentation.pdf
    .pdf 3.1MB
  • email-html-2.txt
    .html 22KB
  • email-plain-1.txt
    1KB

INC0048141.eml

  • SHA256 2470fea77b72806e8a0abaf488429a7481cbf53358ac923ecc3d3df6fc366814
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

[email protected]

Date

Thu, 30 Jul 2026 12:21:35 +0800

Subject

Auto Capture Tenders from GeBiz, GEMS, Sesame, SIT- BidBottAI - AI-Powered Tender Management System

Content-Type

multipart/mixed; boundary="----=_NextPart_000_08BD_01DD201D.FBBE5C40"

Received

from SI2PR02CA0010.apcprd02.prod.outlook.com (2603:1096:4:194::15) by KL1PR03MB7550.apcprd03.prod.outlook.com (2603:1096:820:e6::12) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.270.12; Thu, 30 Jul 2026 08:57:30 +0000

from OSA0EPF000000CD.apcprd02.prod.outlook.com (2603:1096:4:194:cafe::9f) by SI2PR02CA0010.outlook.office365.com (2603:1096:4:194::15) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.270.13 via Frontend Transport; Thu, 30 Jul 2026 08:57:30 +0000

from eblaster360.com.eblaster.hostsg.com (203.175.169.123) by OSA0EPF000000CD.mail.protection.outlook.com (10.167.240.59) with Microsoft SMTP Server id 15.21.292.8 via Frontend Transport; Thu, 30 Jul 2026 08:57:29 +0000

from [116.88.93.211] (port=55605 helo=DESKTOPLMPIRFM) by eblaster360.com.eblaster.hostsg.com with esmtpa (Exim 4.76) (envelope-from <[email protected]>) id 1wpIHA-0008KV-0k; Thu, 30 Jul 2026 12:21:45 +0800

Received-Spf

Pass (protection.outlook.com: domain of dss.com.sg designates 203.175.169.123 as permitted sender) receiver=protection.outlook.com; client-ip=203.175.169.123; helo=eblaster360.com.eblaster.hostsg.com; pr=C

X-Mailer

Microsoft Outlook 16.0

Message-Id

<[email protected]>

Extracted URLs

  • file http://www.avg.com/email-signature?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=emailclient

  • file http://www.dss.com.sg/

  • file https://aka.ms/LearnAboutSenderIdentification

  • file https://s-install.avcdn.net/ipm/preview/icons/icon-envelope-tick-green-avg-v1.png]