Mensajes en cuarentena (4)[.]zip

General

Target
Mensajes en cuarentena (4).zip
Size 34KB
Sample260804-18ssds1gpf
SHA256 8747cea8572c7df5a83e31c81d0c27344ddaaec0515374100106ace899cfb34b
MD5 b879ac2d1318b42c3c68cc03f1ed2bc4
SHA1 4c66fa0f1f9f0b494e9685c223b58523503d44ea
SHA512 ef7d41b4ac3cd5738d0950e0cf912f9c38d206b2e8c814888a91a6f6b5c347f1397a477254794cd33ca80b114fe108131f66bec68e3db362eb24e789c22f8d90
SSDEEP 768:KpQXc0Ol30iTQe1VFrWFtMqsnTKosEuF3kWzl:KpQs0830kbV5YMqk6UWzl
TLSH
T162F2F1FE769355399A80943502C32A1631A64585D07CD39F85C776A0EEA38AFFED070F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

Mensajes en cuarentena (4).zip

.zip 34KB
87cf1fad-2aa3-48e4-6dcf-08deeff450a5/648d3886-e8ee-c434-2bdd-8f3a140783a4.eml

.eml 66KB
Reporte_Incapacidades_Y_Licencias.xls

.xls 39KB
email-html-1.txt

.html 2KB

Mensajes en cuarentena (4).zip

SHA256 8747cea8572c7df5a83e31c81d0c27344ddaaec0515374100106ace899cfb34b
MD5 b879ac2d1318b42c3c68cc03f1ed2bc4
SHA1 4c66fa0f1f9f0b494e9685c223b58523503d44ea
SHA512 ef7d41b4ac3cd5738d0950e0cf912f9c38d206b2e8c814888a91a6f6b5c347f1397a477254794cd33ca80b114fe108131f66bec68e3db362eb24e789c22f8d90
SSDEEP 768:KpQXc0Ol30iTQe1VFrWFtMqsnTKosEuF3kWzl:KpQs0830kbV5YMqk6UWzl
TLSH
T162F2F1FE769355399A80943502C32A1631A64585D07CD39F85C776A0EEA38AFFED070F
MD5 SHA1 SHA512 SSDEEP TLSH

Password

12345

87cf1fad-2aa3-48e4-6dcf-08deeff450a5/648d3886-e8ee-c434-2bdd-8f3a140783a4.eml

SHA256 9534928e518de40e8ec866a58d4fae6e3818f4554415d7dc4a0d0205b534b33c
MD5 b8db8cfb626c0b29834ecb81793c68f6
SHA1 e0c699be5bc2e1cb698d4c3805e0cf30cb77e4f9
SHA512 64256ee51631992f6406720a7a1a03955c478a418d1a4e74f00481c94bdfb4c29ae044f56cd32e8e35a1f7e0b3adca4a24b0f156215e377d7098c3fef5e52928
SSDEEP 768:QrZVRCx9nByPQ+Lhcj7WMjRJcpzJ9IPvoDOlD00K0+wxU6rlwplqF9iNipoF3J:QrrRCbBQQ+L6jKMjRJc5mRu6meI
TLSH
T1E8638D306DD6AFDA8B750C00850CDF044C593B57A6BD505BFA8375AF28A9178EF69C38
MD5 SHA1 SHA512 SSDEEP TLSH

Password

12345

Email Headers

To

[email protected]

From

[email protected]

Return-Path

[email protected]

Date

Sat, 1 Aug 2026 12:42:52 -0500 (GMT-05:00)

Subject

=?UTF-8?Q?Reporte_del_estado_de_tr=C3=A1mite_de_in?= =?UTF-8?Q?capacidades_y_licencias_NI_860001022?=

Content-Type

multipart/mixed; boundary="----=_Part_18130657_195548394.1785606172850"

Received

from DS1P222CA0004.NAMP222.PROD.OUTLOOK.COM (2603:10b6:8:454::6) by DM6PR13MB3836.namprd13.prod.outlook.com (2603:10b6:5:24f::20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.270.17; Sat, 1 Aug 2026 17:42:53 +0000

from DS1PEPF0001709B.namprd05.prod.outlook.com (2603:10b6:8:454:cafe::65) by DS1P222CA0004.outlook.office365.com (2603:10b6:8:454::6) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.270.17 via Frontend Transport; Sat, 1 Aug 2026 17:42:53 +0000

from not26.notify-it.com (209.172.60.126) by DS1PEPF0001709B.mail.protection.outlook.com (10.167.18.105) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.292.8 via Frontend Transport; Sat, 1 Aug 2026 17:42:53 +0000

from s628137.dedi.leaseweb.net (not101.notify-it.com [174.142.1.68]) (Authenticated sender: [email protected]) by not26.notify-it.com (Postfix) with ESMTPA id D165218C00E3C; Sat, 1 Aug 2026 12:42:52 -0500 (-05)

Received-Spf

Pass (protection.outlook.com: domain of keralty.notify-it.com designates 209.172.60.126 as permitted sender) receiver=protection.outlook.com; client-ip=209.172.60.126; helo=not26.notify-it.com; pr=C

X-Mailer

keralty.notify-it.com-840497508

Message-Id

<[email protected]>

Extracted URLs

file https://notificalo.com/notify/services/ac?i=b84fa804-28dd-30fa-ad2f-12deb336a2fe&u=https://www.notificalo.com
file https://notificalo.com/notify/services/ac?i=b84fa804-28dd-30fa-ad2f-12deb336a2fe&u=https://www.notificalo.com/unsubscribe?r=

Sharing

General

Malware Config

Signatures

File Explorer

Mensajes en cuarentena (4).zip

87cf1fad-2aa3-48e4-6dcf-08deeff450a5/648d3886-e8ee-c434-2bdd-8f3a140783a4.eml

Email Headers

Extracted URLs

Reporte_Incapacidades_Y_Licencias.xls

email-html-1.txt