Overview

overview

1

Static

static

1

Fw_ URGENT...ng.eml

windows10-2004-x64

1

Fw_ URGENT...ng.eml

windows11-ltsc_2024-x64

1

Resubmissions

30/07/2026, 09:46

260730-lrmsgsyxgv1

29/07/2026, 14:42

260729-r3hkssaj2t1

Sharing

Copy URL Twitter E-mail

General

  • Target
    Fw_ URGENT REMINDER_ BENTELER Automobiltechnik GmbH und BENTELER Steel_Tube GmbH & Co. KG - US Extended Minerals Reporting.eml
  • Size 137KB
  • Sample260730-lrmsgsyxgv
  • SHA256 7c99a67cacf950df151328139594e66f40a060b285bb605b2fde9a6d9c307114
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • Fw_ URGENT REMINDER_ BENTELER Automobiltechnik GmbH und BENTELER Steel_Tube GmbH & Co. KG - US Extended Minerals Reporting.eml
    .eml 137KB
  • email-html-2.txt
    .html 34KB
  • email-plain-1.txt
    8KB
  • image.png
    .jpg 2KB

Fw_ URGENT REMINDER_ BENTELER Automobiltechnik GmbH und BENTELER Steel_Tube GmbH & Co. KG - US Extended Minerals Reporting.eml

  • SHA256 7c99a67cacf950df151328139594e66f40a060b285bb605b2fde9a6d9c307114
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

In-Reply-To

[email protected]

Date

Wed, 29 Jul 2026 12:00:06 +0000

Subject

Fw: URGENT REMINDER: BENTELER Automobiltechnik GmbH und BENTELER Steel/Tube GmbH & Co. KG - US Extended Minerals Reporting

Content-Type

multipart/related; boundary="_005_CP7P275MB1298BE0FB10DD67A59D21E59AACA2CP7P275MB1298ZAFP_"; type="multipart/alternative"

Received

from JN2P275MB1472.ZAFP275.PROD.OUTLOOK.COM (2603:1086:0:3b::13) by JN3P275MB1137.ZAFP275.PROD.OUTLOOK.COM with HTTPS; Wed, 29 Jul 2026 12:00:21 +0000

from JN3P275CA0001.ZAFP275.PROD.OUTLOOK.COM (2603:1086:0:70::12) by JN2P275MB1472.ZAFP275.PROD.OUTLOOK.COM (2603:1086:0:3b::13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.270.12; Wed, 29 Jul 2026 12:00:12 +0000

from JN1PEPF00001EDE.ZAFP275.PROD.OUTLOOK.COM (2603:1086:0:70:cafe::f) by JN3P275CA0001.outlook.office365.com (2603:1086:0:70::12) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.270.13 via Frontend Transport; Wed, 29 Jul 2026 12:00:12 +0000

from CT2P275CU009.outbound.protection.outlook.com (2a01:111:f403:c209::) by JN1PEPF00001EDE.mail.protection.outlook.com (2603:1086:8::17) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.270.5 via Frontend Transport; Wed, 29 Jul 2026 12:00:12 +0000

from CP7P275MB1298.ZAFP275.PROD.OUTLOOK.COM (2603:1086:100:31::5) by JN3P275MB2947.ZAFP275.PROD.OUTLOOK.COM (2603:1086:0:de::11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.270.13; Wed, 29 Jul 2026 12:00:06 +0000

from CP7P275MB1298.ZAFP275.PROD.OUTLOOK.COM ([fe80::bf7f:27c:f8f1:b2b0]) by CP7P275MB1298.ZAFP275.PROD.OUTLOOK.COM ([fe80::bf7f:27c:f8f1:b2b0%4]) with mapi id 15.21.0270.009; Wed, 29 Jul 2026 12:00:06 +0000

Received-Spf

Pass (protection.outlook.com: domain of crh-africa.co.za designates 2a01:111:f403:c209:: as permitted sender) receiver=protection.outlook.com; client-ip=2a01:111:f403:c209::; helo=CT2P275CU009.outbound.protection.outlook.com; pr=C

Message-Id

<CP7P275MB1298BE0FB10DD67A59D21E59AACA2@CP7P275MB1298.ZAFP275.PROD.OUTLOOK.COM>

Extracted URLs

  • file http://www.ValueStreamEurope.ch__;!!CnhCG70!kBEobYhTvbpGT-Ti-PhQ3vcmgsSJVYQbbxqOT5bfwR4bpJoBOoK9q8XHBeSMlkqVwIiD4GKXpmPn8p2FpSCfQHtgXCXV8A$

  • file https://bxwui.img.a.d.sendibm1.com/im/sh/XhEDiK7HqE78.jpg?u=WtVElij8PJZGcPbTaPHFYnqFfER3wJGA__;!!CnhCG70!kBEobYhTvbpGT-Ti-PhQ3vcmgsSJVYQbbxqOT5bfwR4bpJoBOoK9q8XHBeSMlkqVwIiD4GKXpmPn8p2FpSCfQHvIQbU-YQ$

  • file https://bxwui.r.a.d.sendibm1.com/mk/cl/f/sh/1t6Af4OiGsDg0hCV7C6FUEpJTbFf0Q/lOjNJM6a3-Av

  • file https://bxwui.r.a.d.sendibm1.com/mk/cl/f/sh/1t6Af4OiGsDg0hCV7C6FUEpJTbFf0Q/lOjNJM6a3-Av__;!!CnhCG70!kBEobYhTvbpGT-Ti-PhQ3vcmgsSJVYQbbxqOT5bfwR4bpJoBOoK9q8XHBeSMlkqVwIiD4GKXpmPn8p2FpSCfQHu1jHoE5A$

  • file https://bxwui.r.a.d.sendibm1.com/mk/cl/f/sh/1t6Af4OiGsE8LPOvVYCAeUt8rQEOiU/JB0MDsUYFx3V

  • file https://bxwui.r.a.d.sendibm1.com/mk/cl/f/sh/1t6Af4OiGsE8LPOvVYCAeUt8rQEOiU/JB0MDsUYFx3V__;!!CnhCG70!kBEobYhTvbpGT-Ti-PhQ3vcmgsSJVYQbbxqOT5bfwR4bpJoBOoK9q8XHBeSMlkqVwIiD4GKXpmPn8p2FpSCfQHsr_m3k1Q$

  • file https://bxwui.r.a.d.sendibm1.com/mk/cl/f/sh/1t6Af4OiGsEag7bLtuI5okwyFFD8QY/uLD74xi6ymbs

  • file https://bxwui.r.a.d.sendibm1.com/mk/cl/f/sh/1t6Af4OiGsEag7bLtuI5okwyFFD8QY/uLD74xi6ymbs__;!!CnhCG70!kBEobYhTvbpGT-Ti-PhQ3vcmgsSJVYQbbxqOT5bfwR4bpJoBOoK9q8XHBeSMlkqVwIiD4GKXpmPn8p2FpSCfQHvZNyZ9cg$

  • file https://bxwui.r.a.d.sendibm1.com/mk/cl/f/sh/1t6Af4OiGsF30pnmIGO0z10nd4Bs8c/zs_WXzgn4Uam

  • Show all