Resubmissions

04/08/2026, 14:33

260804-rwxq5szsfw3

04/08/2026, 14:29

260804-rt3jlsgm9w4

General

  • Target
    attachment (52).eml
  • Size 30KB
  • Sample260804-rt3jlsgm9w
  • SHA256 4dd26e159aa413c1e8c7406128e40ea729ad258548b971b5f04eda15f8775db8
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • attachment (52).eml
    .eml 30KB
  • Capture.PNG
    .png 13KB
  • email-html-2.txt
    .html 6KB
  • email-plain-1.txt
    503B

attachment (52).eml

  • SHA256 4dd26e159aa413c1e8c7406128e40ea729ad258548b971b5f04eda15f8775db8
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Date

Mon, 3 Aug 2026 12:35:31 -0500

Subject

Fwd: OC 6000216676 Desprendible de Pago: 16.258.486-2

Content-Type

multipart/related; boundary="000000000000972d1c065827f622"

Received

from mail-ed1-f54.google.com (mail-ed1-f54.google.com [209.85.208.54]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.3, cipher=TLS_AES_256_GCM_SHA384) id uk-mta-322-rYunc3PyO_WZCkJY1uf4sA-1; Mon, 03 Aug 2026 18:35:25 +0100

by mail-ed1-f54.google.com with SMTP id 4fb4d7f45d1cf-69c5fda04a8so6438990a12.1 for <[email protected]>; Mon, 03 Aug 2026 10:35:25 -0700 (PDT)

X-Received

by 2002:a05:6402:5187:b0:6a1:b0b:ba6 with SMTP id 4fb4d7f45d1cf-6a10b0b0f7dmr3131746a12.15.1785778524314; Mon, 03 Aug 2026 10:35:24 -0700 (PDT)

Message-Id

<CAAW74+[email protected]>

Extracted URLs

  • file https://url.uk.m.mimecastprotect.com/s/TPzeCzKw8HRgoo3I4f7Wh9XSoh?domain=api.cloudinary.com