Resubmissions

31/07/2026, 16:15

260731-tqp58adc255

31/07/2026, 16:08

260731-tle5fsbl7w5

General

  • Target
    International Code Council Inc - Abbott PO# D45134597.eml
  • Size 1.7MB
  • Sample260731-tle5fsbl7w
  • SHA256 870dd56f17c68813bb70422f15272cce8a43e011118cdf5be3dfefd4dd46f4c4
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
pdf

Malware Config

Signatures

  • Malformed data in PDF

    A PDF can contain malformed data to evade detection

File Explorer

  • International Code Council Inc - Abbott PO# D45134597.eml
    .eml 1.7MB
  • ICC CARL MORGAM.pdf
    .pdf 1.1MB
  • International Code Council Inc - Abbott PO# D45134597.pdf
    .pdf 93KB
  • email-html-2.txt
    .html 7KB
  • email-plain-1.txt
    675B
  • image001.png
    .png 4KB

International Code Council Inc - Abbott PO# D45134597.eml

  • SHA256 870dd56f17c68813bb70422f15272cce8a43e011118cdf5be3dfefd4dd46f4c4
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Date

Thu, 23 Jul 2026 23:10:21 +0000

Subject

International Code Council Inc - Abbott PO# D45134597

Content-Type

multipart/mixed; boundary="_007_MW4PR84MB211327DD5B670743B6E337B3E5C02MW4PR84MB2113NAMP_"

Received

from IA3PR04MB9111.namprd04.prod.outlook.com (::1) by PH0PR04MB7319.namprd04.prod.outlook.com with HTTPS; Thu, 23 Jul 2026 23:11:50 +0000

from BN0PR08CA0003.namprd08.prod.outlook.com (2603:10b6:408:142::19) by IA3PR04MB9111.namprd04.prod.outlook.com (2603:10b6:208:525::8) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.245.11; Thu, 23 Jul 2026 23:10:44 +0000

from BN2PEPF000044A5.namprd04.prod.outlook.com (2603:10b6:408:142:cafe::50) by BN0PR08CA0003.outlook.office365.com (2603:10b6:408:142::19) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.245.11 via Frontend Transport; Thu, 23 Jul 2026 23:10:43 +0000

from us-smtp-inbound-delivery-1.mimecast.com (170.10.132.61) by BN2PEPF000044A5.mail.protection.outlook.com (10.167.243.104) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.270.5 via Frontend Transport; Thu, 23 Jul 2026 23:10:42 +0000

from mx0a-00033b04.pphosted.com (mx0a-00033b04.pphosted.com [205.220.165.252]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.3, cipher=TLS_AES_256_GCM_SHA384) id us-mta-618-dnaa485yPsmnzjV-SdHEtA-1; Thu, 23 Jul 2026 19:10:27 -0400

from pps.filterd (m0269159.ppops.net [127.0.0.1]) by mx0a-00033b04.pphosted.com (8.18.1.11/8.18.1.11) with ESMTP id 66NMe2CG1516470 for <[email protected]>; Thu, 23 Jul 2026 23:10:26 GMT

from sj2pr03cu001.outbound.protection.outlook.com (mail-westusazon11012056.outbound.protection.outlook.com [52.101.43.56]) by mx0a-00033b04.pphosted.com (PPS) with ESMTPS id 4fg1k06b1y-1 (version=TLSv1.3 cipher=TLS_AES_256_GCM_SHA384 bits=256 verify=NOT) for <[email protected]>; Thu, 23 Jul 2026 23:10:24 +0000 (GMT)

from MW4PR84MB2113.NAMPRD84.PROD.OUTLOOK.COM (2603:10b6:303:1b0::13) by SJ0PR84MB3197.NAMPRD84.PROD.OUTLOOK.COM (2603:10b6:a03:479::6) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.245.11; Thu, 23 Jul 2026 23:10:22 +0000

from MW4PR84MB2113.NAMPRD84.PROD.OUTLOOK.COM ([fe80::e139:8bd3:c99e:b0e0]) by MW4PR84MB2113.NAMPRD84.PROD.OUTLOOK.COM ([fe80::e139:8bd3:c99e:b0e0%5]) with mapi id 15.21.0245.009; Thu, 23 Jul 2026 23:10:22 +0000

Received-Spf

SoftFail (protection.outlook.com: domain of transitioning abbott.com discourages use of 170.10.132.61 as permitted sender)

Message-Id

<MW4PR84MB211327DD5B670743B6E337B3E5C02@MW4PR84MB2113.NAMPRD84.PROD.OUTLOOK.COM>