General

  • Target
    bb3ef6d0de791cbff3b268b94102ccd19ff68734736890dee27c8cf849c85ad9
  • Size 6.1MB
  • Sample260802-w952wsem4x
  • SHA256 bb3ef6d0de791cbff3b268b94102ccd19ff68734736890dee27c8cf849c85ad9
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • bb3ef6d0de791cbff3b268b94102ccd19ff68734736890dee27c8cf849c85ad9
    .eml 6.1MB
  • Semmelweis University - Personal information on enrollment - [email protected] - Gmail.html
    .html 4.1MB
  • Semmelweis University - Personal information on enrollment - [email protected] - Gmail.pdf
    .pdf 354KB
  • email-html-2.txt
    915B
  • email-plain-1.txt
    586B

bb3ef6d0de791cbff3b268b94102ccd19ff68734736890dee27c8cf849c85ad9

  • SHA256 bb3ef6d0de791cbff3b268b94102ccd19ff68734736890dee27c8cf849c85ad9
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

[email protected]

Date

Tue, 26 Aug 2025 11:04:34 +0300

Subject

Enrollment and Visa Process Delay

Content-Type

multipart/mixed; boundary="00000000000050772c063d40205e"

Received

from DU2PR04CA0252.eurprd04.prod.outlook.com (2603:10a6:10:28e::17) by PAXPR03MB8013.eurprd03.prod.outlook.com (2603:10a6:102:21c::6) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9052.20; Tue, 26 Aug 2025 08:04:53 +0000

from DU2PEPF0001E9C1.eurprd03.prod.outlook.com (2603:10a6:10:28e:cafe::7d) by DU2PR04CA0252.outlook.office365.com (2603:10a6:10:28e::17) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.20.9052.22 via Frontend Transport; Tue, 26 Aug 2025 08:04:52 +0000

from mail-ed1-x542.google.com (2a00:1450:4864:20::542) by DU2PEPF0001E9C1.mail.protection.outlook.com (2603:10a6:18:3::106) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.20.9073.11 via Frontend Transport; Tue, 26 Aug 2025 08:04:52 +0000

by mail-ed1-x542.google.com with SMTP id 4fb4d7f45d1cf-61c4f73cfa0so4071723a12.0; Tue, 26 Aug 2025 01:04:52 -0700 (PDT)

X-Received

by 2002:a05:6402:40c3:b0:61c:7743:7f9a with SMTP id 4fb4d7f45d1cf-61c7743853emr3784680a12.28.1756195489548; Tue, 26 Aug 2025 01:04:49 -0700 (PDT)

Received-Spf

Pass (protection.outlook.com: domain of gmail.com designates 2a00:1450:4864:20::542 as permitted sender) receiver=protection.outlook.com; client-ip=2a00:1450:4864:20::542; helo=mail-ed1-x542.google.com; pr=C

Message-Id

<CAHORWfvemMzd=fxVf_KBVrZyOX+[email protected]>