General

  • Target
    3z9EEig-39546-06g89CB0529688A507A6ba974c1.txt
  • Size 254KB
  • Sample260804-m4rgwatzcs
  • SHA256 c172605302ca371e6c00a45edf53a4e5139f2ee9adf602b639a11615f65796a1
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • 3z9EEig-39546-06g89CB0529688A507A6ba974c1.txt
    .eml 254KB
  • email-html-2.txt
    .html 39KB
  • email-plain-1.txt
    11KB
  • image001.png
    .png 37KB
  • image002.jpg
    .jpg 52KB
  • image003.png
    .png 21KB
  • image004.png
    .png 883B
  • image005.png
    .png 827B
  • image006.png
    .png 935B
  • image007.png
    .png 825B
  • image008.png
    .png 1KB
  • image009.png
    .png 18KB

3z9EEig-39546-06g89CB0529688A507A6ba974c1.txt

  • SHA256 c172605302ca371e6c00a45edf53a4e5139f2ee9adf602b639a11615f65796a1
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

In-Reply-To

PAWPR10MB8240E3A1031605274AF61F29B8C92@PAWPR10MB8240.EURPRD10.PROD.OUTLOOK.COM

Return-Path

<[email protected]>

Date

Mon, 3 Aug 2026 09:08:20 +0000

Subject

=?iso-8859-1?Q?RE:_Contrataci=F3n_Seguro_salud?=

Content-Type

multipart/related; boundary="_012_AS2PR03MB9720C2645F8556DD5D7E224291D52AS2PR03MB9720eurp_"; type="multipart/alternative"

Received

from OSPPR02CU001.outbound.protection.outlook.com (mail-norwayeastazon11023136.outbound.protection.outlook.com [40.107.159.136]) by prd06-euc1-09 (envelope-from <[email protected]>) FireEye ETP with ESMTPS (cipher=TLS_AES_256_GCM_SHA384) id 3z9EEig-39546-06g89CB0529688A507A6ba974c1; batch_id 89/CB-05296-88A507A6; Mon, 3 Aug 2026 09:08:25 +0000 (UTC)

from AS2PR03MB9720.eurprd03.prod.outlook.com (2603:10a6:20b:60c::5) by FRRPR03MB11804.eurprd03.prod.outlook.com (2603:10a6:d10:1cf::24) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.270.18; Mon, 3 Aug 2026 09:08:21 +0000

from AS2PR03MB9720.eurprd03.prod.outlook.com ([fe80::b94b:8785:157:d9d7]) by AS2PR03MB9720.eurprd03.prod.outlook.com ([fe80::b94b:8785:157:d9d7%6]) with mapi id 15.21.0270.016; Mon, 3 Aug 2026 09:08:21 +0000

Message-Id

<AS2PR03MB9720C2645F8556DD5D7E224291D52@AS2PR03MB9720.eurprd03.prod.outlook.com>

Extracted URLs

  • file http://ow.ly/1Znd30oFQGj

  • file http://ow.ly/3Pzp30oFQRX

  • file http://ow.ly/IWIZ30oFR2R

  • file http://ow.ly/Qaag30oFQKg

  • file http://ow.ly/dHxA30oFQNS

  • file http://www.melia.com/

  • file http://www.sanitas.es/RGPD

  • file http://www.solkatmandu.com/

  • file https://melia.app.link/jh6IbM1y8u

  • Show all