Quarantined Messages[.]zip

Quarantined Messages.zip

SHA256 fc0bec634b60674c65b8ab680d321fa295556f0c7b55e7d92b84a7bdd01c7387
MD5 14e2dc3ba92633acfca6ab1c5dd9d8c4
SHA1 a30219ab68d287680ca82de5cb62114c9e5acb96
SHA512 9ca3fdcdf9c46d32828f8982231fcf22817a246618496103d1239c00792103cd1d0645cd295a6c930556f21eb402d8d82c9c161b43fbaf2499aa6d39d88f583b
SSDEEP 1536:td7q5mW1wxsGkaHRYGQP63q56MBZfrduMe:37wIaCxJQy3sZfpe
TLSH
T1132301285DFD97CEDC6C836B32342924329AB732EB659E1AD6B06315D398FC45CC28D4
MD5 SHA1 SHA512 SSDEEP TLSH

Password

753

3dbc3591-4164-4c7c-5ba3-08def25bceeb/d7af8dbc-1b7d-782f-3a02-01c7588b28c8.eml

SHA256 6ae0d6c9702075d6727e177fae893a52731cffa3df8c102adedb471df8df92cf
MD5 ad3c5b99d413287c7219385049e27be6
SHA1 e40a2dc903a3f2984c1d2a73d5fbe88e32aef4ba
SHA512 00ba405a4d6fb43fad546b96fc735f8d9f3555087821487a7ec9d0340afdce93b0cd281c84171c5f464f0584c28fdb19d542b79fada08f88e0db6bf3d2d2be13
SSDEEP 1536:bOFAvAVyzt42kTlT6W8l8vNeejRVcEBI53dltFBWNEGPNQ7qjaEL9vOS:bOjVpTs8VPhW53Pt2HPNWqjLpH
TLSH
T1EA63E063A9531865F36041664F02FD096273BC0A78BB8D64382E06BB17EE27D7B71DD8
MD5 SHA1 SHA512 SSDEEP TLSH

Password

753

Email Headers

To

[email protected]

From

[email protected]

Return-Path

[email protected]

Date

Tue, 4 Aug 2026 22:08:02 +0300

Subject

/!\:Demande d'informations concernant la Protection Temporaire

Content-Type

multipart/mixed; boundary="0000000000008a345b06583d60e6"

Received

from AS4P250CA0010.EURP250.PROD.OUTLOOK.COM (2603:10a6:20b:5df::7) by DB9PR04MB8220.eurprd04.prod.outlook.com (2603:10a6:10:242::7) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.292.15; Tue, 4 Aug 2026 19:08:46 +0000

from AMS0EPF000001A2.eurprd05.prod.outlook.com (2603:10a6:20b:5df:cafe::26) by AS4P250CA0010.outlook.office365.com (2603:10a6:20b:5df::7) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.292.16 via Frontend Transport; Tue, 4 Aug 2026 19:08:46 +0000

from mail.rrn.fgov.be (193.191.221.152) by AMS0EPF000001A2.mail.protection.outlook.com (10.167.16.235) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.292.8 via Frontend Transport; Tue, 4 Aug 2026 19:08:46 +0000

from mail-lf1-f54.google.com ([209.85.167.54]) by mail.rrn.fgov.be with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 04 Aug 2026 21:08:23 +0200

by mail-lf1-f54.google.com with SMTP id 2adb3069b0e04-5b2a44a3b66so250755e87.1 for <[email protected]>; Tue, 04 Aug 2026 12:08:17 -0700 (PDT)

X-Received

by 2002:a05:6512:304e:b0:5b2:b941:ddae with SMTP id 2adb3069b0e04-5b2f4b88c38mr144252e87.4.1785870496172; Tue, 04 Aug 2026 12:08:16 -0700 (PDT)

Received-Spf

None (protection.outlook.com: sl.ukr.education does not designate permitted sender hosts)

None (mail.rrn.fgov.be: no sender authenticity information available from domain of [email protected]) identity=pra; client-ip=209.85.167.54; receiver=mail.rrn.fgov.be; envelope-from="[email protected]"; x-sender="[email protected]"; x-conformance=sidf_compatible.downgrade_pra

None (mail.rrn.fgov.be: no sender authenticity information available from domain of [email protected]) identity=mailfrom; client-ip=209.85.167.54; receiver=mail.rrn.fgov.be; envelope-from="[email protected]"; x-sender="[email protected]"; x-conformance=sidf_compatible.downgrade_pra

None (mail.rrn.fgov.be: no sender authenticity information available from domain of [email protected]) identity=helo; client-ip=209.85.167.54; receiver=mail.rrn.fgov.be; envelope-from="[email protected]"; x-sender="[email protected]"; x-conformance=sidf_compatible.downgrade_pra

Message-Id

<CA+[email protected]>

Objet_Demande_d'informations_concernant_la_Protection_Temporaire.pdf

SHA256 7ce3e07a7f537d09eb7d56415691b15fbdbfc5936ade95c9521db2acde58c294
MD5 3eaab17fd3d86deec6b35183f117e86b
SHA1 52ca7926dac6b91f0034a002bb42eb8b153d6686
SHA512 c49ad74487315d09af748aae857080705a8049dda1d6be29be2902f7ad532cb5d607ab7dc9e434058a9343d2be9377c565e915b53a1451c1ee78795e59b0dea8
SSDEEP 768:YUOX8R1J+4h95lrdVnzzHv0IYVxrG5YQI3Ko+q3615tV6Mw8As5R/xSOM4Sks+0e:D531qQBxw8Asj5A4ST+0jSoLqL
TLSH
T160E2BF71E8ED5CACED49C70AD5AB306D0F2CB0AF23D928190D3D5E14E5419D6ABC22D7
MD5 SHA1 SHA512 SSDEEP TLSH

Password

753

email-html-2.txt

SHA256 df0b0f568431b5a5e09c7abd14e6f6318b861232dc3b4b58e6b11c3db72416c7
MD5 16c67bb9ac49b20775275a6c9b9a66d7
SHA1 c1ae60b3e8e2757b0417181e7b7cc889f2655988
SHA512 bd3a2d28ef6250449e612feae00e3250d3aab2b09e3f990f89d8a8a249fddf9c84f4f8bd411de3c89deff824589aa314e98828865ea99c6c513b3ea8f949a876
TLSH
T1281123F2E5412C1D51E25F34F602F79D0305E508A537DA28892561E7C88E9193BBB3D8
MD5 SHA1 SHA512 TLSH

email-plain-1.txt

SHA256 aaee899deed49ea2e7d832d13d135e75786134eca611ad63b02281b898d2a68a
MD5 e031cfe0c64afccace6fe9622cb5ac78
SHA1 5d3ef1a5585d35874ea414641fef3131153f688f
SHA512 66a524e4fdd694265d0ea908129f066ab18ea35fc996f171f4956b70efbcd8bd5f20a0fa299681c4809d3727dbe041dd9075f1878e9dce422449ec905c101e29
TLSH
T11EE0AB66A89110A806483E70FF05EA2A1961C40CA436C14D082A86C3410347E35FC0F8
MD5 SHA1 SHA512 TLSH

Sharing

General

Malware Config

Signatures

File Explorer

Quarantined Messages.zip

3dbc3591-4164-4c7c-5ba3-08def25bceeb/d7af8dbc-1b7d-782f-3a02-01c7588b28c8.eml

Email Headers

Objet_Demande_d'informations_concernant_la_Protection_Temporaire.pdf

email-html-2.txt

email-plain-1.txt