General

  • Target
    Message.eml
  • Size 19KB
  • Sample260804-tkjfgsthnc
  • SHA256 1161cfa4454f2b98201f3a4d7ffc16d65f459374097fb52664345239786caaa2
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • Message.eml
    .eml 19KB
  • email-html-2.txt
    .html 2KB
  • email-plain-1.txt
    257B

Message.eml

  • SHA256 1161cfa4454f2b98201f3a4d7ffc16d65f459374097fb52664345239786caaa2
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

[email protected]

Date

Tue, 4 Aug 2026 15:39:16 +0000

Subject

Satish | GCL Solar Materials E-Doc Ref#:SP30826.

Content-Type

multipart/alternative; boundary="_000_DS4PPFB6B52B4A17DBE71964E13163943E8CED42DS4PPFB6B52B4A1_"

Received

from SJ0PR13CA0061.namprd13.prod.outlook.com (2603:10b6:a03:2c4::6) by MN2PR13MB3789.namprd13.prod.outlook.com (2603:10b6:208:1e4::24) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.292.15; Tue, 4 Aug 2026 15:39:26 +0000

from CO1PEPF00012E81.namprd03.prod.outlook.com (2603:10b6:a03:2c4::4) by SJ0PR13CA0061.outlook.office365.com (2603:10b6:a03:2c4::6) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.292.16 via Frontend Transport; Tue, 4 Aug 2026 15:39:24 +0000

from PH7PR06CU001.outbound.protection.outlook.com (52.101.201.134) by CO1PEPF00012E81.mail.protection.outlook.com (10.167.249.56) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.292.8 via Frontend Transport; Tue, 4 Aug 2026 15:39:24 +0000

from DS4PPFB6B52B4A1.namprd10.prod.outlook.com (2603:10b6:f:fc00::d43) by DM6PR10MB4377.namprd10.prod.outlook.com (2603:10b6:5:21a::7) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.292.15; Tue, 4 Aug 2026 15:39:16 +0000

from DS4PPFB6B52B4A1.namprd10.prod.outlook.com ([fe80::f75a:36f:7671:a34e]) by DS4PPFB6B52B4A1.namprd10.prod.outlook.com ([fe80::f75a:36f:7671:a34e%3]) with mapi id 15.21.0270.017; Tue, 4 Aug 2026 15:39:16 +0000

Received-Spf

Pass (protection.outlook.com: domain of gclsolarmaterials.com designates 52.101.201.134 as permitted sender) receiver=protection.outlook.com; client-ip=52.101.201.134; helo=PH7PR06CU001.outbound.protection.outlook.com; pr=C

Message-Id

<DS4PPFB6B52B4A17DBE71964E13163943E8CED42@DS4PPFB6B52B4A1.namprd10.prod.outlook.com>

Extracted URLs

  • file https://docs.zoom.us/doc/e04KJoV_TKKhBw7zpXqnZg