Overview

overview

4

Static

static

1

Message.eml

windows10-2004-x64

4

Message.eml

windows11-ltsc_2024-x64

1

email-html-1.html

windows10-2004-x64

3

email-html-1.html

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    Message.eml
  • Size 61KB
  • Sample260804-t85cvsvfpf
  • SHA256 f381aad2ba662810ef6fb558e69c91d75e1b36a11b9a28cfd5f647e2d369661f
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • Message.eml
    .eml 61KB
  • email-html-1.txt
    .html 51KB

Message.eml

  • SHA256 f381aad2ba662810ef6fb558e69c91d75e1b36a11b9a28cfd5f647e2d369661f
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

[email protected]

Date

Tue, 04 Aug 2026 16:10:03 +0000

Subject

Is performance management slowing your business down?

Content-Type

text/html; charset=utf-8

Received

from SJ0PR13CA0192.namprd13.prod.outlook.com (2603:10b6:a03:2c3::17) by SJ0PR13MB5368.namprd13.prod.outlook.com (2603:10b6:a03:3e0::15) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.292.15; Tue, 4 Aug 2026 16:10:12 +0000

from SJ5PEPF000001D1.namprd05.prod.outlook.com (2603:10b6:a03:2c3:cafe::8b) by SJ0PR13CA0192.outlook.office365.com (2603:10b6:a03:2c3::17) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.292.16 via Frontend Transport; Tue, 4 Aug 2026 16:10:12 +0000

from forms.hr.com (172.246.49.75) by SJ5PEPF000001D1.mail.protection.outlook.com (10.167.242.53) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.292.8 via Frontend Transport; Tue, 4 Aug 2026 16:10:11 +0000

Received-Spf

Pass (protection.outlook.com: domain of forms.hr.com designates 172.246.49.75 as permitted sender) receiver=protection.outlook.com; client-ip=172.246.49.75; helo=forms.hr.com; pr=C

Message-Id

<[email protected]>