General

  • Target
    phish_alert_sp2_2.0.0.0.eml
  • Size 32KB
  • Sample260731-j9bf3afd69
  • SHA256 7414ffc3b6a388f555ed4562b7560e75a284ff4c3fd73b5af6eee1dc0515e549
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • phish_alert_sp2_2.0.0.0.eml
    .eml 32KB
  • email-html-1.txt
    .html 20KB

phish_alert_sp2_2.0.0.0.eml

  • SHA256 7414ffc3b6a388f555ed4562b7560e75a284ff4c3fd73b5af6eee1dc0515e549
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

[email protected]

Date

Mon, 27 Jul 2026 03:23:58 -0400

Subject

=?UTF-8?B?VVBTIFVwZGF0ZTogUGFja2FnZSBEZWxpdmVyZWQ=?=

Content-Type

multipart/mixed; boundary="----sinikael-?=_1-17851430280100.8839983431749925"

Received

from AS8PR02MB8736.eurprd02.prod.outlook.com (2603:10a6:20b:53a::21) by AS8PR02MB7253.eurprd02.prod.outlook.com with HTTPS; Mon, 27 Jul 2026 07:24:07 +0000

from AS8PR07CA0050.eurprd07.prod.outlook.com (2603:10a6:20b:459::7) by AS8PR02MB8736.eurprd02.prod.outlook.com (2603:10a6:20b:53a::21) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.245.13; Mon, 27 Jul 2026 07:24:02 +0000

from AM1PEPF000252DE.eurprd07.prod.outlook.com (2603:10a6:20b:459:cafe::f) by AS8PR07CA0050.outlook.office365.com (2603:10a6:20b:459::7) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.270.9 via Frontend Transport; Mon, 27 Jul 2026 07:24:02 +0000

from mx0a-002b8002.pphosted.com (148.163.135.5) by AM1PEPF000252DE.mail.protection.outlook.com (10.167.16.56) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.270.5 via Frontend Transport; Mon, 27 Jul 2026 07:24:01 +0000

from pps.filterd (m0425509.ppops.net [127.0.0.1]) by mx0a-002b8002.pphosted.com (8.18.1.11/8.18.1.11) with ESMTP id 66R6FBRT487112 for <[email protected]>; Mon, 27 Jul 2026 03:23:59 -0400

from gappsappsagent10.ups.com (gappsappsagent10.ups.com [153.2.235.26]) by mx0a-002b8002.pphosted.com (PPS) with ESMTPS id 4fnc7qf5ja-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for <[email protected]>; Mon, 27 Jul 2026 03:23:59 -0400 (EDT)

from pps.filterd (gappsappsagent10.ups.com [127.0.0.1]) by gappsappsagent10.ups.com (8.18.1.2/8.18.1.2) with ESMTP id 66R6AoNc018669 for <[email protected]>; Mon, 27 Jul 2026 03:23:58 -0400

from nscore-8d957bdbd-trhzf (lsvrocpp40006.linux.us.ups.com [10.127.129.19]) by gappsappsagent10.ups.com (PPS) with ESMTPS id 4fnan067re-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for <[email protected]>; Mon, 27 Jul 2026 03:23:58 -0400

Received-Spf

Pass (protection.outlook.com: domain of ups.com designates 148.163.135.5 as permitted sender) receiver=protection.outlook.com; client-ip=148.163.135.5; helo=mx0a-002b8002.pphosted.com; pr=C

Message-Id

<496156213.1894057.1785137038511.JavaMail.1001@winsmtpappspp.ups.com>

Extracted URLs

  • file https://customerfeedback.ups.com/jfe/form/SV_bC2kQlNfK1b33QG?z=MVpWQTU2NDcwNDIyNzYwNjEy&locale=en_GB

  • file https://www.ups.com/

  • file https://www.ups.com/gb/en/support/contact-us

  • file https://www.ups.com/gb/en/support/shipping-support/legal-terms-conditions

  • file https://www.ups.com/gb/en/support/shipping-support/legal-terms-conditions/privacy-notice

  • file https://www.ups.com/guestclaims/create?loc=en_GB&WT.z_eCTAid=ct1_eml_ReportLoss__ct1_eml_tra_eml_autodel&WT.z_edatesent=07272026&eqp=dmF1bHQ6djQ4OnE1ZmVFOUJuWmg3ZG5RR0RJbGhmVWJ2bTFXTGxMcUdWSWNrdDVmSWVXMWRsMDg3V3RPWlpHdXdHMzZqZFpZbkljOU9uQnZFLzJpaktUNWlWUlIyZmZON1VjMWd5MHU5RkVabzMxeHlESDdFTFdvY2FTQVEwcUJ1U0YvTWY3bDlYZklkcHNqZTAxOEd0SUVlRTdKSWlCakdYNnhBN1BHREpPL01ubjZEdkhVWXZhVFFYOEF0dk53PT0=

  • file https://www.ups.com/track?loc=en_GB&Requester=SBN&tracknum=1ZVA56470422760612&AgreeToTermsAndConditions=yes&WT.z_eCTAid=ct1_eml_Tracking__ct1_eml_tra_eml_autodel&WT.z_edatesent=07272026

  • file https://wwwapps.ups.com/emailEnrollment/optout?loc=en_GB&clientId=NOT&eqp=dmF1bHQ6djQ4OlJUblFXL1J5eUtXaFZGcldxM1Zuc3hINmVoOW1wUzNiT1pQMUZlNmRDR2VZNnZxZi91SGU1ZXNoUEd3V0psTmJpYlVvTGNqK3VpS0RYN1ZSekk4Z3pTSGFmWDJPT3BJS2dlMkZ2eElJNmdCbEl2bDRyNVVZeUVXdQ==