Mensajes en cuarentena (6).zip
- SHA256 268b18a51cf53cbf6c39aff6a5e3b5b180bce5fd3387de3b7f1522274146f2b3
Password
12345
Static task
static1
Behavioral task
behavioral1
Sample
48446e8f-139c-46d4-89c0-08deee814cb5/940f8159-b11a-da28-91aa-a00881b95c19.eml
Resource
win10v2004-20260513-en
windows10-2004-x64
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
48446e8f-139c-46d4-89c0-08deee814cb5/940f8159-b11a-da28-91aa-a00881b95c19.eml
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
8 signatures
150 seconds
Behavioral task
behavioral3
Sample
attachment-2.eml
Resource
win10v2004-20260513-en
windows10-2004-x64
9 signatures
150 seconds
General
- Target Mensajes en cuarentena (6).zip
- Size 47KB
- Sample260804-2ms2pszvd1
- SHA256 268b18a51cf53cbf6c39aff6a5e3b5b180bce5fd3387de3b7f1522274146f2b3
- MD5 fe16738497647ed3c9e51fb9eae70d68
- SHA1 23d2ff417c1c9b92650aed0776ae7dfba9359820
- SHA512 1b14dd8010b70a08017f4fbbddc699b2b9b269957f63b18e5b88dcbf0ce7831f6cb22d20d7a1d776deaeb0005bec0c3dd56825c166721074b8c2839f0f4865b4
- SSDEEP 768:xgOOwJeOh5NZ5VPKzZHHJ2ipwf/JTal3z5AIWOWrR9Rmp8j556Uwq3:COOseOLHTyzZHH0QwfxTaz5ARtt9Ry8T
- TLSH T1D123F1CF46D94666F598EEF4D194B3E301833C25986A73B7CF89AA484B40CC6856E889
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
File Explorer
-
Mensajes en cuarentena (6).zip.zip 47KB
-
48446e8f-139c-46d4-89c0-08deee814cb5/940f8159-b11a-da28-91aa-a00881b95c19.eml.eml 105KB
-
attachment-2.eml 88KB
-
attachment-120KB
-
email-plain-1.txt173B
48446e8f-139c-46d4-89c0-08deee814cb5/940f8159-b11a-da28-91aa-a00881b95c19.eml
- SHA256 332999664c7212ade817feb244c883e8488675e1388707b0534f051d96de0643
- MD5 6fd667b9e1de37c0bb659008af1913c4
- SHA1 8253564beb3dff1ca085f206c5a352ca9f1e15a7
- SHA512 4f51dbe66bda41c106d8cff9ae195944563377abf61c1e30e92483542c9a73712ea8b971224839f31d1b2e515af89982d8707f6574c74a8a380e536322576c7f
- SSDEEP 3072:bFVklQKRmFpklPuxrNCu5WFzvMa7SQe2586TRPlH1qH:bFVk+KRmFpkZwrNCu8Rd+J2W6TRPqH
- TLSH T1B1B35C1242071827DBA212465E553D0A92A17D84F43B61803AAFA57F12CF47FBF3ED9B
- MD5 SHA1 SHA512 SSDEEP TLSH
Password
12345
Email Headers
From
Return-Path
<>
Date
Thu, 30 Jul 2026 23:26:56 +0200 (CEST)
Subject
Undelivered Mail Returned to Sender
Content-Type
multipart/mixed; boundary="_b47bece4-6efa-4b59-a015-9e62091644a6_"
Received
from SJ2P220CA0007.NAMP220.PROD.OUTLOOK.COM (2603:10b6:a03:5da::13) by SA3PR13MB6466.namprd13.prod.outlook.com (2603:10b6:806:39b::9) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.270.15; Thu, 30 Jul 2026 21:27:04 +0000
from SJ1PEPF00002320.namprd03.prod.outlook.com (2603:10b6:a03:5da:cafe::9d) by SJ2P220CA0007.outlook.office365.com (2603:10b6:a03:5da::13) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.270.15 via Frontend Transport; Thu, 30 Jul 2026 21:27:04 +0000
from FR4P281CU032.outbound.protection.outlook.com (2a01:111:f403:da0c::2) by SJ1PEPF00002320.mail.protection.outlook.com (2603:10b6:a0f:fc02::156) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.292.8 via Frontend Transport; Thu, 30 Jul 2026 21:27:03 +0000
from DB9PR01CA0023.eurprd01.prod.exchangelabs.com (2603:10a6:10:1d8::28) by BE2P281MB4575.DEUP281.PROD.OUTLOOK.COM (2603:10a6:b10:bd::5) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.270.16; Thu, 30 Jul 2026 21:26:57 +0000
from DB1PEPF000509F2.eurprd02.prod.outlook.com (2603:10a6:10:1d8:cafe::41) by DB9PR01CA0023.outlook.office365.com (2603:10a6:10:1d8::28) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.270.15 via Frontend Transport; Thu, 30 Jul 2026 21:26:57 +0000
from smtp.thyssenkrupp.com (98.67.223.140) by DB1PEPF000509F2.mail.protection.outlook.com (10.167.242.148) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.292.8 via Frontend Transport; Thu, 30 Jul 2026 21:26:57 +0000
from localhost (localhost [127.0.0.1]) by smtp.thyssenkrupp.com (Postfix) with ESMTP id 4hB2Mh5tWZz3hjSB for <[email protected]>; Thu, 30 Jul 2026 23:26:56 +0200 (CEST)
from smtp.thyssenkrupp.com ([127.0.0.1]) by localhost (vmlsmtpbbprd0-2.tkcloud.net [127.0.0.1]) (amavis, port 10024) with ESMTP id 6HJ433XGYqBG for <[email protected]>; Thu, 30 Jul 2026 23:26:56 +0200 (CEST)
from smtpheader.thyssenkrupp.com (unknown [10.153.53.100]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by smtp.thyssenkrupp.com (Postfix) with ESMTPS id 4hB2Mh56Q3z3hjS6 for <[email protected]>; Thu, 30 Jul 2026 23:26:56 +0200 (CEST)
by smtpheader.thyssenkrupp.com (Postfix) id 4hB2Mh4fjwzbg9k; Thu, 30 Jul 2026 23:26:56 +0200 (CEST)
Received-Spf
Pass (protection.outlook.com: domain of FR4P281CU032.outbound.protection.outlook.com designates 2a01:111:f403:da0c::2 as permitted sender) receiver=protection.outlook.com; client-ip=2a01:111:f403:da0c::2; helo=FR4P281CU032.outbound.protection.outlook.com; pr=C
None (protection.outlook.com: smtp.thyssenkrupp.com does not designate permitted sender hosts)
Message-Id
attachment-2
- SHA256 c614a607305192fe6c27290b8eb6d2854ec7ba5ec9e660d9f59548d480438d3e
- MD5 b0df00959a036cfe186e882aecf12ff1
- SHA1 8e7509f04826c968489bea6f5b1638cdaa49e093
- SHA512 2f97651cc3e5c1f0dc19fd5fe633f93447cb17323aaddcbeae5f3319e08328d964ed0904afda48e387a2bd9a62ef91c1ec0930b790ee8d9e1ddc93bbbe26a454
- SSDEEP 1536:LFpklvwCKfQKxZxMkCu5uZmK36WvMatBn63SkcYzoC/2sQRF5Uzmt88R/Y/fMbvE:LFpklPuxrNCu5WFzvMa7SQe2586TRPla
- TLSH T135935B1242075823DBA116465E513D0A92A17D88F43B61813EAFA57F12CF47FBF2ED8B
- MD5 SHA1 SHA512 SSDEEP TLSH
Password
12345
Email Headers
From
Return-Path
<>
Date
Thu, 30 Jul 2026 23:26:56 +0200 (CEST)
Subject
Undelivered Mail Returned to Sender
Content-Type
multipart/report; report-type=delivery-status; boundary="4hB2Mh3hlGzbg9j.1785446816/smtpheader.thyssenkrupp.com"
Received
from SJ2P220CA0007.NAMP220.PROD.OUTLOOK.COM (2603:10b6:a03:5da::13) by SA3PR13MB6466.namprd13.prod.outlook.com (2603:10b6:806:39b::9) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.270.15; Thu, 30 Jul 2026 21:27:04 +0000
from SJ1PEPF00002320.namprd03.prod.outlook.com (2603:10b6:a03:5da:cafe::9d) by SJ2P220CA0007.outlook.office365.com (2603:10b6:a03:5da::13) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.270.15 via Frontend Transport; Thu, 30 Jul 2026 21:27:04 +0000
from FR4P281CU032.outbound.protection.outlook.com (2a01:111:f403:da0c::2) by SJ1PEPF00002320.mail.protection.outlook.com (2603:10b6:a0f:fc02::156) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.292.8 via Frontend Transport; Thu, 30 Jul 2026 21:27:03 +0000
from DB9PR01CA0023.eurprd01.prod.exchangelabs.com (2603:10a6:10:1d8::28) by BE2P281MB4575.DEUP281.PROD.OUTLOOK.COM (2603:10a6:b10:bd::5) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.270.16; Thu, 30 Jul 2026 21:26:57 +0000
from DB1PEPF000509F2.eurprd02.prod.outlook.com (2603:10a6:10:1d8:cafe::41) by DB9PR01CA0023.outlook.office365.com (2603:10a6:10:1d8::28) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.270.15 via Frontend Transport; Thu, 30 Jul 2026 21:26:57 +0000
from smtp.thyssenkrupp.com (98.67.223.140) by DB1PEPF000509F2.mail.protection.outlook.com (10.167.242.148) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.292.8 via Frontend Transport; Thu, 30 Jul 2026 21:26:57 +0000
from localhost (localhost [127.0.0.1]) by smtp.thyssenkrupp.com (Postfix) with ESMTP id 4hB2Mh5tWZz3hjSB for <[email protected]>; Thu, 30 Jul 2026 23:26:56 +0200 (CEST)
from smtp.thyssenkrupp.com ([127.0.0.1]) by localhost (vmlsmtpbbprd0-2.tkcloud.net [127.0.0.1]) (amavis, port 10024) with ESMTP id 6HJ433XGYqBG for <[email protected]>; Thu, 30 Jul 2026 23:26:56 +0200 (CEST)
from smtpheader.thyssenkrupp.com (unknown [10.153.53.100]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by smtp.thyssenkrupp.com (Postfix) with ESMTPS id 4hB2Mh56Q3z3hjS6 for <[email protected]>; Thu, 30 Jul 2026 23:26:56 +0200 (CEST)
by smtpheader.thyssenkrupp.com (Postfix) id 4hB2Mh4fjwzbg9k; Thu, 30 Jul 2026 23:26:56 +0200 (CEST)
Received-Spf
Pass (protection.outlook.com: domain of FR4P281CU032.outbound.protection.outlook.com designates 2a01:111:f403:da0c::2 as permitted sender) receiver=protection.outlook.com; client-ip=2a01:111:f403:da0c::2; helo=FR4P281CU032.outbound.protection.outlook.com; pr=C
None (protection.outlook.com: smtp.thyssenkrupp.com does not designate permitted sender hosts)
Message-Id
attachment-1
- SHA256 71c547f081131b0be0bcc286e32ab29f2f0b290a5d775ff21fa1ddf518ed0415
- MD5 aa08dd428ff3340917dee899e657bf51
- SHA1 eff0219bb155ac62c1404ad366b25dcc3d9653f0
- SHA512 2252bebef2c71b2385b9326feb9c005a4fecc1d8085d1ae6b7ce25b75be3f87ba71adf32d821e93cbb5c0a7f9d3710d18298358a491b49f4ff40718e55205384
- SSDEEP 384:3gnQRFp3Uzmka8mh/LBpVi2bEL/fMbvBj6sqEC7e0kjz1fK13YBvyiCfc1I:QnQRF5Uzmt88Ri+Y/fMbvBE37eHn1f92
- TLSH T1C7920901119D38142AB211467BEB7A43A38509546077E2F472EBDBA637CF487AF4DCEB
- MD5 SHA1 SHA512 SSDEEP TLSH
email-plain-1.txt
- SHA256 ecfbcb60f4072eafcb386c6487fe6cfd1c82f16e357bde1f289bcd9e5997edf7
- MD5 70c7ecda9e7cd91e1004fb3bf48eb822
- SHA1 22d97c047995ecb20765b09a7abc26ecdf0fb91c
- SHA512 4e22b6a74a7d0b6589eb754002e7953c04af363d22b82255af59f153fd383c2da38cd5e516f154c4575e97542a96a639791a530a4b3c5190ba52ab390f5065b1
- TLSH T12DC0C032F906135585203BA0B10DE10F818510F1F408C902C2B30247299D08443F12CC
- MD5 SHA1 SHA512 TLSH