General

  • Target
    3z9EEr9-39546-06g065405876CECA07A6660d545.txt
  • Size 842KB
  • Sample260804-m2z18styfv
  • SHA256 987b585dbe7d8212921f6074a447d6da12f72be0a4aca766dc76abbe902be631
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
pdf

Malware Config

Signatures

  • Malformed data in PDF

    A PDF can contain malformed data to evade detection

File Explorer

  • 3z9EEr9-39546-06g065405876CECA07A6660d545.txt
    .eml 842KB
  • 13203-id-e47ad178-d887-426a-a62d-7cbbfc67bb91.png
    .png 46KB
  • POLIZA SALUD PRIMERO NUMERO 85775333 SANTIAGO NANG.pdf
    .pdf 556KB
  • email-html-2.txt
    .html 3KB
  • email-plain-1.txt
    434B

3z9EEr9-39546-06g065405876CECA07A6660d545.txt

  • SHA256 987b585dbe7d8212921f6074a447d6da12f72be0a4aca766dc76abbe902be631
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

<[email protected]>

Date

Mon, 3 Aug 2026 14:59:51 +0000

Subject

POLIZA SALUD PRIMERO 85775333

Content-Type

multipart/mixed; boundary="_006_DB7PR02MB5081CFEE8A5650A91196A727B8D52DB7PR02MB5081eurp_"

Received

from esa2.hc654-28.c3s2.iphmx.com (esa2.hc654-28.c3s2.iphmx.com [68.232.159.249]) by prd06-euc1-06 (envelope-from <[email protected]>) FireEye ETP with ESMTPS (cipher=ECDHE-RSA-AES256-GCM-SHA384) id 3z9EEr9-39546-06g065405876CECA07A6660d545; batch_id 06/54-05876-CECA07A6; Mon, 3 Aug 2026 14:59:57 +0000 (UTC)

from mail-swedencentralazon11023087.outbound.protection.outlook.com (HELO GVXPR05CU001.outbound.protection.outlook.com) ([52.101.83.87]) by ob1.hc654-28.c3s2.iphmx.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 03 Aug 2026 16:59:55 +0200

from DB7PR02MB5081.eurprd02.prod.outlook.com (2603:10a6:10:7f::29) by PAVPR02MB9964.eurprd02.prod.outlook.com (2603:10a6:102:31f::9) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.270.17; Mon, 3 Aug 2026 14:59:51 +0000

from DB7PR02MB5081.eurprd02.prod.outlook.com ([fe80::92cf:a255:363c:4204]) by DB7PR02MB5081.eurprd02.prod.outlook.com ([fe80::92cf:a255:363c:4204%5]) with mapi id 15.21.0270.016; Mon, 3 Aug 2026 14:59:51 +0000

Message-Id

<DB7PR02MB5081CFEE8A5650A91196A727B8D52@DB7PR02MB5081.eurprd02.prod.outlook.com>

Extracted URLs

  • file https://bit.ly/4bX40um