Overview

overview

3

Static

static

1

‼️ Ate...so.eml

windows10-ltsc_2021-x64

1

email-html-2.html

windows10-ltsc_2021-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    ‼️ Atenção, mudança no acesso.eml
  • Size 72KB
  • Sample260730-v15t4adp21
  • SHA256 d2888c0811a8284fb2c0161d534c2493e27bb4f49eb28edf83a789a170f0049c
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • ‼️ Atenção, mudança no acesso.eml
    .eml 72KB
  • email-html-2.txt
    .html 56KB
  • email-plain-1.txt
    3KB

‼️ Atenção, mudança no acesso.eml

  • SHA256 d2888c0811a8284fb2c0161d534c2493e27bb4f49eb28edf83a789a170f0049c
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Delivered-To

[email protected]

Return-Path

<juridico+[email protected]>

Date

Wed, 29 Jul 2026 13:04:59 -0600

Subject

=?UTF-8?B?4oC877iPIEF0ZW7Dp8OjbywgbXVkYW7Dp2Egbm8gYWNlc3Nv?=

Content-Type

multipart/alternative; boundary="loOVOfxsNXnE=_?:"

Received

by 2002:a05:6a06:3161:b0:79a:3847:4e1a with SMTP id r33csp5253352piu; Wed, 29 Jul 2026 12:05:05 -0700 (PDT)

from mail-sor-f69.google.com (mail-sor-f69.google.com. [209.85.220.69]) by mx.google.com with SMTPS id d75a77b69052e-529e2b8629dsor23079751cf.4.2026.07.29.12.05.05 for <[email protected]> (Google Transport Security); Wed, 29 Jul 2026 12:05:05 -0700 (PDT)

by 2002:a05:622a:1cc3:b0:517:6cc4:eb81 with SMTP id d75a77b69052e-52b3613440els3183701cf.0.-pod-prod-04-us; Wed, 29 Jul 2026 12:05:04 -0700 (PDT)

from mta3.campanhasnext.b.br (mta3.campanhasnext.b.br. [128.245.66.19]) by mx.google.com with ESMTPS id af79cd13be357-933d337f564si255027685a.121.2026.07.29.12.05.04 for <[email protected]> (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 29 Jul 2026 12:05:04 -0700 (PDT)

by mta3.campanhasnext.b.br id hd97du39mjc2 for <[email protected]>; Wed, 29 Jul 2026 19:04:59 +0000 (envelope-from <bounce-D6Z4U5DCDYNEDADJ7MDCNHRP6Q.110064@bounce.campanhasbradesco.com.br>)

X-Received

by 2002:a05:622a:14cb:b0:528:3b9b:4f56 with SMTP id d75a77b69052e-529d719459bmr74868551cf.82.1785351905665; Wed, 29 Jul 2026 12:05:05 -0700 (PDT)

by 2002:ac8:574f:0:b0:519:f884:b587 with SMTP id d75a77b69052e-529d6fe299bmr72711571cf.27.1785351904999; Wed, 29 Jul 2026 12:05:04 -0700 (PDT)

by 2002:a05:620a:a0ce:10b0:92e:ecbd:3445 with SMTP id af79cd13be357-93483f03f82mr7870285a.48.1785351904215; Wed, 29 Jul 2026 12:05:04 -0700 (PDT)

Received-Spf

pass (google.com: domain of juridico+[email protected] designates 209.85.220.69 as permitted sender) client-ip=209.85.220.69;

pass (google.com: domain of bounce-d6z4u5dcdynedadj7mdcnhrp6q.110064@bounce.campanhasbradesco.com.br designates 128.245.66.19 as permitted sender) client-ip=128.245.66.19;

Message-Id

<[email protected]>

Extracted URLs

  • file https://click.campanhasbradesco.com.br/?qs=ABB7InYiOjEsImQiOjQ5NTJ9AAsAAAAAA1-t5H5FTLQw095AbYGZIEW4l4WE7l4BTLYmNKpibin0rnTJGV0zxi1jmBbpJWfMQnvLYmnqEdJWoApiAjFpNJ8wZ_l2OulQJeBN7y1wh0w

  • file https://click.campanhasbradesco.com.br/?qs=ABB7InYiOjEsImQiOjQ5NTJ9AAsAAAAAA1-t5H5Gx2VMmCJvr0QVhlnDRJgk15y8o1jEwiP_ai2eVtVAs4SQNC_72TUp6C5gSlfr9nN9fL9c54Csr7XxPKXDF39aY-oGeoegmGB8fOxnvsGs

  • file https://click.campanhasbradesco.com.br/?qs=ABB7InYiOjEsImQiOjQ5NTJ9AAsAAAAAA1-t5H5HngoAc-FGmo9-hjgIdGNHa5YWl1wVoN8x0F7YOgdZRbv80GSYBVA8gadgaw_xerGd3YN1tc9M0JIjLbHKiNS52EXgs8pwID0V3_g

  • file https://click.campanhasbradesco.com.br/?qs=ABB7InYiOjEsImQiOjQ5NTJ9AAsAAAAAA1-t5H5IJZL_ByyVUR6HeX8zcfSA5J4RabqIIb6hrR_4MRQMGovKbJaRaqxVjEqW0jb9DRP0KPkI_cz0yVHIlAntvoJpIALEONO9JjUITag0BNnD