General

  • Target
    tG55Y2O5_LDKKEFGJ023_sX3IqzVqpIZ_2026-08-05T07_22_27.895Z.eml
  • Size 174KB
  • Sample260805-jwpfrssdpb
  • SHA256 6d4f85e575a736893519887d0116275a090bf0fdb93cd5cfc7590d80caea4336
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • tG55Y2O5_LDKKEFGJ023_sX3IqzVqpIZ_2026-08-05T07_22_27.895Z.eml
    .eml 174KB
  • DBSCMBZ926Y9MC8420.pdf
    .pdf 1KB
  • VJIV6S6VRQ7AM6.gif
    107KB
  • email-html-2.txt
    6KB
  • email-plain-1.txt
    2B

tG55Y2O5_LDKKEFGJ023_sX3IqzVqpIZ_2026-08-05T07_22_27.895Z.eml

  • SHA256 6d4f85e575a736893519887d0116275a090bf0fdb93cd5cfc7590d80caea4336
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

[email protected]

Date

Tue, 4 Aug 2026 19:18:40 +0000

Subject

a quick request regarding the current plan

Content-Type

multipart/mixed; boundary="_005_VI0P193MB2641B536AAA0613B05541CFF92D42VI0P193MB2641EURP_"

Received

from DU7PPF5E5A14061.eurprd02.prod.outlook.com (2603:10a6:18:3::cce) by PA4PR02MB7987.eurprd02.prod.outlook.com with HTTPS; Tue, 4 Aug 2026 19:21:15 +0000

from AS4P191CA0005.EURP191.PROD.OUTLOOK.COM (2603:10a6:20b:5d5::15) by DU7PPF5E5A14061.eurprd02.prod.outlook.com (2603:10a6:18:3::cce) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.292.16; Tue, 4 Aug 2026 19:20:57 +0000

from AMS0EPF0000019A.eurprd05.prod.outlook.com (2603:10a6:20b:5d5:cafe::2f) by AS4P191CA0005.outlook.office365.com (2603:10a6:20b:5d5::15) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.292.15 via Frontend Transport; Tue, 4 Aug 2026 19:20:57 +0000

from mx07-00009201.pphosted.com (185.132.180.224) by AMS0EPF0000019A.mail.protection.outlook.com (10.167.16.246) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.292.8 via Frontend Transport; Tue, 4 Aug 2026 19:20:57 +0000

from pps.filterd (m0168937.ppops.net [127.0.0.1]) by mx07-00009201.pphosted.com (8.18.1.11/8.18.1.11) with ESMTP id 674IsmUJ1056479 for <[email protected]>; Tue, 4 Aug 2026 19:20:57 GMT

from osppr02cu001.outbound.protection.outlook.com (mail-norwayeastazolkn19013083.outbound.protection.outlook.com [52.103.51.83]) by mx07-00009201.pphosted.com (PPS) with ESMTPS id 4fuh9vjxt8-1 (version=TLSv1.3 cipher=TLS_AES_256_GCM_SHA384 bits=256 verify=NOT) for <[email protected]>; Tue, 04 Aug 2026 19:18:42 +0000 (GMT)

from VI0P193MB2641.EURP193.PROD.OUTLOOK.COM (2603:10a6:800:2cc::8) by PA1P193MB3231.EURP193.PROD.OUTLOOK.COM (2603:10a6:102:561::17) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.270.18; Tue, 4 Aug 2026 19:18:40 +0000

from VI0P193MB2641.EURP193.PROD.OUTLOOK.COM ([fe80::6df9:9a96:3a93:4427]) by VI0P193MB2641.EURP193.PROD.OUTLOOK.COM ([fe80::6df9:9a96:3a93:4427%6]) with mapi id 15.21.0270.016; Tue, 4 Aug 2026 19:18:40 +0000

Received-Spf

Pass (protection.outlook.com: domain of hotmail.com designates 52.103.51.83 as permitted sender) receiver=protection.outlook.com; client-ip=52.103.51.83; helo=osppr02cu001.outbound.protection.outlook.com; pr=C

Message-Id

<VI0P193MB2641B536AAA0613B05541CFF92D42@VI0P193MB2641.EURP193.PROD.OUTLOOK.COM>