Overview

overview

7

Static

static

1

Usuário s...de.eml

windows10-ltsc_2021-x64

7

email-html-1.html

windows10-ltsc_2021-x64

3

Resubmissions

31/07/2026, 18:05

260731-wpn8msee397

30/07/2026, 19:02

260730-xp6claeb457

Sharing

Copy URL Twitter E-mail

General

  • Target
    Usuário suspenso por inatividade.eml
  • Size 21KB
  • Sample260730-xp6claeb45
  • SHA256 992dd363de760008b267cd0779affc8c9a9bdfd95f74f78f89a86ee938dff7f6
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • Usuário suspenso por inatividade.eml
    .eml 21KB
  • email-html-1.txt
    .html 1KB

Usuário suspenso por inatividade.eml

  • SHA256 992dd363de760008b267cd0779affc8c9a9bdfd95f74f78f89a86ee938dff7f6
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Delivered-To

[email protected]

Return-Path

<juridico+[email protected]>

Date

Wed, 29 Jul 2026 15:00:01 -0300 (GMT-03:00)

Subject

=?UTF-8?Q?Usu=C3=A1rio_suspenso_por_inatividade?=

Content-Type

multipart/related; boundary="----=_Part_1899_1865905772.1785348001264"

Received

by 2002:a05:6a06:3161:b0:79a:3847:4e1a with SMTP id r33csp5187787piu; Wed, 29 Jul 2026 11:00:10 -0700 (PDT)

from mail-sor-f69.google.com (mail-sor-f69.google.com. [209.85.220.69]) by mx.google.com with SMTPS id 46e09a7af769-7f00c378c3esor1860759a34.2.2026.07.29.11.00.08 for <[email protected]> (Google Transport Security); Wed, 29 Jul 2026 11:00:08 -0700 (PDT)

by 2002:a05:6820:16aa:b0:6a1:86cd:4659 with SMTP id 006d021491bc7-6acb9300189ls37310eaf.1.-pod-prod-03-us; Wed, 29 Jul 2026 11:00:07 -0700 (PDT)

from a4i908.smtp2go.com (a4i908.smtp2go.com. [158.120.83.140]) by mx.google.com with ESMTPS id 006d021491bc7-6aca52060c5si2219370eaf.24.2026.07.29.11.00.07 for <[email protected]> (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 29 Jul 2026 11:00:07 -0700 (PDT)

from [10.175.241.175] (helo=wildflybatch1oci) by smtpcorp.com with esmtpsa (TLS1.0:ECDHE_SECP256R1__RSA_SHA1__AES_128_CBC__SHA1:128) (Exim 4.99.4) (envelope-from <[email protected]>) id 1wp8ZY-4o5NDgrhFe0-h6oU for [email protected]; Wed, 29 Jul 2026 18:00:04 +0000

X-Received

by 2002:a05:6830:3890:b0:7e9:b4d0:df76 with SMTP id 46e09a7af769-7efff19b5d3mr4818501a34.30.1785348009857; Wed, 29 Jul 2026 11:00:09 -0700 (PDT)

by 2002:a4a:e907:0:b0:6a3:94bc:bdb9 with SMTP id 006d021491bc7-6ac96a58d52mr3442907eaf.25.1785348008302; Wed, 29 Jul 2026 11:00:08 -0700 (PDT)

by 2002:a05:6820:4c01:b0:6ab:15d:e295 with SMTP id 006d021491bc7-6ac96d07805mr3287398eaf.52.1785348007600; Wed, 29 Jul 2026 11:00:07 -0700 (PDT)

Received-Spf

pass (google.com: domain of juridico+[email protected] designates 209.85.220.69 as permitted sender) client-ip=209.85.220.69;

pass (google.com: domain of bounce.r4b82zuyhb2c8z4=ddfmn05h72w3=4gpynbtgyh96ql@em681029.simplesmenteuse.com.br designates 158.120.83.140 as permitted sender) client-ip=158.120.83.140;

Message-Id

<1716513682.1900.1785348003491.JavaMail.wildfly@wildflybatch1oci>

Extracted URLs

  • file https://neopoc.simplesmenteuse.com.br/SuseToolsWeb/login.zul?chave=akYwSStQeHM5RUY4TDMrVGh3aTcxRlh2bE5Ua21lTTNNNGYzeU1RM1FXS0xhb2xrS1BvbXhoOWYzTHhPUmFOR2lYY0RETi9CRjB5dFY2dG10RCtiV2c9PQ==