Overview

overview

3

Static

static

1

Pedido de ...do.eml

windows10-2004-x64

3

Pedido de ...do.eml

windows11-ltsc_2024-x64

1

=?UTF-8?B?...?=.pdf

windows10-2004-x64

3

=?UTF-8?B?...?=.pdf

windows11-ltsc_2024-x64

3

email-html-2.html

windows10-2004-x64

3

email-html-2.html

windows11-ltsc_2024-x64

3

email-plain-1.txt

windows10-2004-x64

1

email-plain-1.txt

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    Pedido de anulação não solicitado.eml
  • Size 126KB
  • Sample260804-lr2xeacl41
  • SHA256 73d511657cf6ebb4e52d98906843abcf27c47a538095a69064277e69d5c75e33
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • Pedido de anulação não solicitado.eml
    .eml 126KB
  • =?UTF-8?B?V2laaW5rIFBlZGlkbyBBZGVzw6NvIOKAkyBBbnVsYcOnw6NvLnBkZg==?=
    .pdf 53KB
  • email-html-2.txt
    .html 15KB
  • email-plain-1.txt
    4KB

Pedido de anulação não solicitado.eml

  • SHA256 73d511657cf6ebb4e52d98906843abcf27c47a538095a69064277e69d5c75e33
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

In-Reply-To

[email protected]

Return-Path

alertaseguranca+[email protected]

Date

Tue, 4 Aug 2026 10:18:14 +0100

Subject

=?UTF-8?B?UGVkaWRvIGRlIGFudWxhw6fDo28gbsOjbyBzb2xpY2l0YWRv?=

Content-Type

multipart/mixed; boundary="00000000000035e4380658352372"

Received

from DU0PR03MB9731.eurprd03.prod.outlook.com (2603:10a6:10:44d::14) by AM6PR03MB4568.eurprd03.prod.outlook.com with HTTPS; Tue, 4 Aug 2026 09:23:11 +0000

from DUZP191CA0067.EURP191.PROD.OUTLOOK.COM (2603:10a6:10:4fa::26) by DU0PR03MB9731.eurprd03.prod.outlook.com (2603:10a6:10:44d::14) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.270.18; Tue, 4 Aug 2026 09:22:40 +0000

from DU2PEPF00028D01.eurprd03.prod.outlook.com (2603:10a6:10:4fa:cafe::1d) by DUZP191CA0067.outlook.office365.com (2603:10a6:10:4fa::26) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.292.15 via Frontend Transport; Tue, 4 Aug 2026 09:22:40 +0000

from nat.eu.perception-point.io (99.80.189.20) by DU2PEPF00028D01.mail.protection.outlook.com (10.167.242.185) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.270.5 via Frontend Transport; Tue, 4 Aug 2026 09:22:40 +0000

from GV1PR07CU001.outbound.protection.outlook.com (mail-gv1pr07cu00105.outbound.protection.outlook.com [40.93.214.101]) by inbound-smtp.eu-west-1.amazonaws.com with SMTP id 4i995encmin6ohuh8mrl90lskp3u99roibvmuk81 for [email protected]; Tue, 04 Aug 2026 09:22:34 +0000 (UTC)

from AM0P309CA0001.EURP309.PROD.OUTLOOK.COM (2603:10a6:20b:28f::35) by AM9PR03MB6691.eurprd03.prod.outlook.com (2603:10a6:20b:2d7::19) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.270.18; Tue, 4 Aug 2026 09:18:35 +0000

from AMS0EPF00000192.eurprd05.prod.outlook.com (2603:10a6:20b:28f:cafe::91) by AM0P309CA0001.outlook.office365.com (2603:10a6:20b:28f::35) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.315.4 via Frontend Transport; Tue, 4 Aug 2026 09:18:35 +0000

from PA4PR04CU001.outbound.protection.outlook.com (2a01:111:f403:c20a::7) by AMS0EPF00000192.mail.protection.outlook.com (2603:10a6:20f:fff4:0:13:0:a) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.292.8 via Frontend Transport; Tue, 4 Aug 2026 09:18:35 +0000

from DUZP191CA0056.EURP191.PROD.OUTLOOK.COM (2603:10a6:10:4fa::14) by DB5PR10MB7890.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:10:48f::22) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.270.17; Tue, 4 Aug 2026 09:18:30 +0000

from DB1PEPF000509F5.eurprd02.prod.outlook.com (2603:10a6:10:4fa:cafe::9f) by DUZP191CA0056.outlook.office365.com (2603:10a6:10:4fa::14) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.292.16 via Frontend Transport; Tue, 4 Aug 2026 09:18:29 +0000

from mail-yw1-x1132.google.com (2607:f8b0:4864:20::1132) by DB1PEPF000509F5.mail.protection.outlook.com (2603:10a6:18:3::697) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.292.8 via Frontend Transport; Tue, 4 Aug 2026 09:18:29 +0000

by mail-yw1-x1132.google.com with SMTP id 00721157ae682-81ed000b507so38600597b3.0 for <[email protected]>; Tue, 04 Aug 2026 02:18:29 -0700 (PDT)

X-Received

by 2002:a05:690c:338a:b0:812:996f:176f with SMTP id 00721157ae682-81fd4a4a806mr175635787b3.11.1785835107493; Tue, 04 Aug 2026 02:18:27 -0700 (PDT)

Received-Spf

Fail (protection.outlook.com: domain of wizink.pt does not designate 99.80.189.20 as permitted sender) receiver=protection.outlook.com; client-ip=99.80.189.20; helo=nat.eu.perception-point.io;

pass (spfCheck: domain of wizink.pt designates 40.93.214.101 as permitted sender) client-ip=40.93.214.101; envelope-from=alertaseguranca+[email protected]; helo=GV1PR07CU001.outbound.protection.outlook.com;

Pass (protection.outlook.com: domain of wizink.pt designates 2a01:111:f403:c20a::7 as permitted sender) receiver=protection.outlook.com; client-ip=2a01:111:f403:c20a::7; helo=PA4PR04CU001.outbound.protection.outlook.com; pr=C

Pass (protection.outlook.com: domain of gmail.com designates 2607:f8b0:4864:20::1132 as permitted sender) receiver=protection.outlook.com; client-ip=2607:f8b0:4864:20::1132; helo=mail-yw1-x1132.google.com; pr=C

Message-Id

<CAOfaBn1+wqKjToKFZQfCHgf0MqHyc8y=FLoNU+[email protected]>

Extracted URLs

  • file http://wizink.pt

  • file http://wizink.pt/

  • file https://email.alertas.wizink.pt/c/eJxEkU2TojAQhn9NuI2VdPg8cBiVOM6OqIjAcAtJXDMGcDEjO_76LWZra6v60G91P9Ufr4wpIScgjopJEHohJX5InXMcNYBDn3OXeMEpkhEmkoSngEAT-iTAkaNjwODjELs4BAJ05roiojTyI0wU9RVHLuZGDZbfZqN-6O4yu1rHxGdrrzdEnxEwBGwcx5nR3UVJ3c1E3yJgom-vvPuait_Y1EiZajmiS0IAA0H0WVyfBB8s_xRiUsPT36RvnnR36oeWW31XzhC_Js_pbJGtD_mWJRly8c-WazNNcm566IXov4EYBXMEoCUC-N4NGrrGvP29bB6me8Ov8_cu-WouWVezutoWpntvWa9e5GKTF2OBTZVWrN_mzOcv8itbRH5qsmRfhlSUxV6tvF-HltQHON4PCztsK8OLIhnl0SPHvF7vibHyct5lK0PUyktVbu6yLLpjIr3Nx9zNPtaD0uHjwPZ3sTq_qZLZHzjdCpbO5bJ2Sx1tcnin_EXq-qPAZckeGetJs3plb5hQWZJrUSZ4t0d0OQUAggUCuPWfg1D_b-ZWnCcVLB0bVwn2ks0uqXZ4-vg_tx0b-27gAcbOPYY_AQAA__8Z_azs

  • file https://email.alertas.wizink.pt/c/eJxEkU2TojwQxz9NuA2VN94OHEYljvMoKiIgt5DEEQ3gg1FWP_0Wbm1tVR_619Vd3f3_y5AgdMTIUiHyfMcnyPWJdQr50SWSE-gRJ6AcuoJS5QoBoedQgZBn1SGG2IU-pNDHCBObUhEQErgBRIq4igMKuVa94Td7qF91e7GvxtLhyZjrDZBPgBnAbBgG-9ndzb1StuiasfLuvXa9uf9wDQhTDQdkhhCGGAHyKa4fgveG34UYqf_4k3TVR90eu77hpn4oqw-_o8_YniaLXbpmUQIo_Gl4rccl1q3uOyG690AIvAnAuJYA4_dVuCILyJtfs-ql2yX8nhza6FldkrZkZbHOdHtoWKe-5HSVZkMGdREXrFunzOVf8plMAzfWSbTNfSLybKvmzv-7BpU7vH_spqZfF5pnWTTIvYP2abnYIm3k5bRJ5hqpuROrVD9knrX7SDqr84Qm50Wvav-1Y9uHmJ-WKmfmPxivBYsnclbSvA5WKT4Q_iXr8pzBPGevhHWomn-zJURE5uia5RHcbAGZjYExwFOA8a2790L9-5kbcRrJm1kmLCLoRKtNVGzgqPhfny0TutRzMITWI8S_AwAA__8EQawy

  • file https://email.alertas.wizink.pt/c/eJxEkUtv4jAQxz-Nc2tkj53XIYcCMaVbAoSQpLmsHMcthjzY4JItn34VVquV5jD_0W80j38dUkI-gFgqJJ7v-JS4PrWOYSWkVIGDiWACiOd4jAS-qjzfJ4pVjFg6BAwu9jHDPhCgNmMyoDRwA0wUdZVADItGDUZc7VHfdXe2L8ZqwqMxlyuizwg4Aj6Oo627qxGfg2ht2bdT7UH_vJgJoVy1AtEFIYCBIPosL09SDEZ8STmp4elv0ldPuvvoh1YYfVPWEL5Gz7E9T1b7dMOjBDH82QrdTCOsqx56KftHQ4i8GQLQNQJ4bAUVXWHR_l5U96Z7w6-z9y76rs5JV_Ky2GRN997yXr3U83WajRluirjg_Sblrnipv5N54MZNEu1yn8o826ml82vfknIPh9t-boZN0Ygsi8b64JBDWq52pDH1-bhNlg1RSydWaXOr86w7RLWzPs1YcloNSvv3Pd_d5PL4pnJufuB4I3k8qxcly3WwTuGdipdal6cM5zm_J7wn1fKVv2FC65xcsjzC2x2iiykAEMwRwLX_GqT6f7Mw8jgpb2GZsIiwE623UbHF08f_-WyZ0GWeAxhbtxD-BAAA__8nwauY

  • file https://email.alertas.wizink.pt/c/eJxEkcuO4joQQL_G2XVkl_NikUUDMQ0XAoSQhOwc21wMeTDBTab5-lG6NRqpFnWkU6qXDCkhZyCWCokfuAElXkCtS0hUJT2OfUrOmANI7AleKYdj4lTnyq8sHQIGDwfYwQEQoLbjiAmlE2-CiaKe4sjBvFa94Q970C_d3uy7serwYsz9geg7AoaADcNgn7lQVdfdbNE1CFiuyx95NChTDUd0TghgIIi-i_ub4L3hn0KM1L_9JF31pttz1zfc6Key-nAVvcf2LFke0i2LEuTg_xuu67GF9dB9J0T3XRAif4oAtEQA30NBRZeYN7_n1atu13g1PbXRV3VL2pKVxTar21PDOvUhZ5s0GzJcF3HBum3KPP4hv5LZxIvrJNrnARV5tlcL99ehIeUBjs_DzPTbouZZFg3y6JJjWi73pDbydtkli5qohRurtH7KPGuPkXQ316mTXJe90sHrwPZPsbisVc7MfzjeChZP5bx0cj3ZpHCi_EPq8prhPGevhHWkWqzYGhMqc3LP8gjv9ojOxwBAMEMAj-6zF-rfztyIy0j-3DJhEWE32uyiYofHi_99s2VCz_FdwNh6hvAnAAD___ivq2g