Overview

overview

3

Static

static

1

Yeo BS - S...pp.pdf

windows10-2004-x64

3

Yeo BS - S...pp.pdf

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    0bc415a3-44cb-0f05-0268-0f4161c50016.eml
  • Size 11.0MB
  • Sample260804-j7dhmszycx
  • SHA256 9146e95049720a0eac818cfda5945ae7857365c0843b5267e8d0a167451679fd
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • 0bc415a3-44cb-0f05-0268-0f4161c50016.eml
    .eml 11.0MB
  • Yeo BS - SCS Cancer Care Fund app.pdf
    .pdf 8.0MB
  • email-html-2.txt
    .html 6KB
  • email-plain-1.txt
    1KB
  • image.png
    .png 6KB

0bc415a3-44cb-0f05-0268-0f4161c50016.eml

  • SHA256 9146e95049720a0eac818cfda5945ae7857365c0843b5267e8d0a167451679fd
  • MD5 SHA1 SHA512 SSDEEP TLSH
Password
2R£5{zEC£kiE71tl}2X1

Email Headers

Return-Path

[email protected]

Date

Mon, 3 Aug 2026 11:48:55 +0000

Subject

YEO BS (SXXXX123I)- SCS Cancer Care Fund Application

Content-Type

multipart/mixed; boundary="_006_TYZPR02MB75606A09DD86C88AF3C56A50AED52TYZPR02MB7560apcp_"

Received

from TY4P286CA0017.JPNP286.PROD.OUTLOOK.COM (2603:1096:405:2b0::19) by JH0PR02MB7677.apcprd02.prod.outlook.com (2603:1096:990:64::8) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.270.17; Mon, 3 Aug 2026 11:49:00 +0000

from TY2PEPF0000AB89.apcprd03.prod.outlook.com (2603:1096:405:2b0:cafe::65) by TY4P286CA0017.outlook.office365.com (2603:1096:405:2b0::19) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.270.18 via Frontend Transport; Mon, 3 Aug 2026 11:49:00 +0000

from TYPPR03CU001.outbound.protection.outlook.com (2a01:111:f403:c405::5) by TY2PEPF0000AB89.mail.protection.outlook.com (2603:1096:408::d07) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.292.8 via Frontend Transport; Mon, 3 Aug 2026 11:49:00 +0000

from TYZPR02MB7560.apcprd02.prod.outlook.com (2603:1096:405:47::7) by OSNPR02MB9440.apcprd02.prod.outlook.com (2603:1096:604:496::19) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.270.17; Mon, 3 Aug 2026 11:48:56 +0000

from TYZPR02MB7560.apcprd02.prod.outlook.com ([fe80::dbaf:2aa4:b4b2:b931]) by TYZPR02MB7560.apcprd02.prod.outlook.com ([fe80::dbaf:2aa4:b4b2:b931%4]) with mapi id 15.21.0270.016; Mon, 3 Aug 2026 11:48:56 +0000

Received-Spf

Pass (protection.outlook.com: domain of crawfurdhospital.com designates 2a01:111:f403:c405::5 as permitted sender) receiver=protection.outlook.com; client-ip=2a01:111:f403:c405::5; helo=TYPPR03CU001.outbound.protection.outlook.com; pr=C

Message-Id

<TYZPR02MB75606A09DD86C88AF3C56A50AED52@TYZPR02MB7560.apcprd02.prod.outlook.com>

Extracted URLs

  • file http://www.crawfurdhospital.com/