111526 .zip
- SHA256 d7cecf575a8d8f5032df71d1d8b2046480aa9a03ebe2a1edee7fe7994d64f0ad
Password
1234
Static task
static1
General
- Target 111526 .zip
- Size 35KB
- Sample260805-kfdvrsgc55
- SHA256 d7cecf575a8d8f5032df71d1d8b2046480aa9a03ebe2a1edee7fe7994d64f0ad
- MD5 42f0b5263042e2f1bf2788f4ef8aaffc
- SHA1 eb01a544dca1e52fdbd5228c9717547110310a1b
- SHA512 ba1ae16220098b3229b4b95292a51a734ad40e69101d574c37e4c0de61ca1cfd0cab9a266057bf85dda0ec3e6014729f068be5dda49332c2a6e01527bc9bb865
- SSDEEP 768:S7Ec9sa+lsr+8Hu4WO4RB4MZHTtULm5/QHMA5AgKk4ZCN7b6bPN:Vqsa+lLvRBvFlIuKrNH6bPN
- TLSH T1DBF2F1D6540B27D3FF459C742D8E641D05D5BE7ED4A3180A0D90BD2880FBF42B975EA2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
File Explorer
-
111526 .zip.zip 35KB
-
fb992cec-d442-4511-b22a-08dee9a8cfb6/611b5a24-1a2f-0b16-4662-c8dea854dc68.eml.eml 66KB
-
email-html-2.txt.html 13KB
-
email-plain-1.txt683B
-
fsfsf fsfsf - Payslip for Month.pdf.pdf 30KB
fb992cec-d442-4511-b22a-08dee9a8cfb6/611b5a24-1a2f-0b16-4662-c8dea854dc68.eml
- SHA256 233cd5fd072b0b97d65673164cdb0f3e93b61c3920ddefc31c723c580d22d09a
- MD5 48f6699bc763c1a806fbcbd289e280fe
- SHA1 035b69602d7c9c417e0f40ac299f6e0904fc59d9
- SHA512 22d362ed7be12d979029f8622bb498660b6454840bbbc341aa121e3170ac96e78ef1696db21959acc0cb11351a416c1cc2294b20f6c8d48f71220c98e455bb74
- SSDEEP 1536:huiPyd61To/xmKyB16VOL8Clh18Rncl683AF:k+ZJ96VOL8W2cl6cO
- TLSH T10763E40BBED11C818B6B49569ACFBBFD3B3E5BD65F6208B4618A6B3D060DDD382C0045
- MD5 SHA1 SHA512 SSDEEP TLSH
Password
1234
Email Headers
From
Reply-To
Return-Path
bounces+[email protected]
Date
Fri, 24 Jul 2026 17:27:16 +0000 (UTC)
Subject
Netflix: Ihr Konto wurde gesperrt.
Content-Type
multipart/mixed; boundary=1341831d3cfd8260da8d8a5f673636b8a3c0e946dc3710d32016fe291440
Received
from DU5PR03MB10220.eurprd03.prod.outlook.com (::1) by GV2PR03MB9451.eurprd03.prod.outlook.com with HTTPS; Fri, 24 Jul 2026 17:27:51 +0000
from AS4P189CA0034.EURP189.PROD.OUTLOOK.COM (2603:10a6:20b:5dd::12) by DU5PR03MB10220.eurprd03.prod.outlook.com (2603:10a6:10:51c::6) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.223.18; Fri, 24 Jul 2026 17:27:18 +0000
from AM3PEPF0000A79B.eurprd04.prod.outlook.com (2603:10a6:20b:5dd:cafe::2) by AS4P189CA0034.outlook.office365.com (2603:10a6:20b:5dd::12) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.245.12 via Frontend Transport; Fri, 24 Jul 2026 17:27:18 +0000
from o5.sendgrid2.brightpay.co.uk (198.21.1.230) by AM3PEPF0000A79B.mail.protection.outlook.com (10.167.16.106) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.270.5 via Frontend Transport; Fri, 24 Jul 2026 17:27:17 +0000
by recvd-7655b4b597-ksnxv with SMTP id recvd-7655b4b597-ksnxv-1-6A63A073-93 2026-07-24 17:27:15.828097372 +0000 UTC m=+164088.415218388
from NzY3MzIyMQ (unknown) by geopod-ismtpd-12 (SG) with HTTP id rNKjwXDbQiePTqcaJL9Isw Fri, 24 Jul 2026 17:27:15.753 +0000 (UTC)
Received-Spf
Pass (protection.outlook.com: domain of em1903.brightpay.co.uk designates 198.21.1.230 as permitted sender) receiver=protection.outlook.com; client-ip=198.21.1.230; helo=o5.sendgrid2.brightpay.co.uk; pr=C
Message-Id
<rNKjwXDbQiePTqcaJL9Isw@geopod-ismtpd-12>
Extracted URLs
-
file https://aka.ms/LearnAboutSenderIdentification
-
file https://beacons.ai/netflixteam
email-html-2.txt
- SHA256 4c4a54152164a5cb53129b4f5c3f2d4852a675742e77ad85ced75038e641b084
- MD5 16772cc2293cf366841783d0276ebbac
- SHA1 4f6a45a557664bc0874a32fe61b58fe0d9b9954d
- SHA512 9778bacbd427779beed5325787c1e3713d6830ca2d90c27435f1655c9a928cc2aee47c6014ad4ec3c59ba28b504839fafff7c75f16994001e2b8cf51ac9fa0b2
- SSDEEP 192:/x2PUx2Sx2Bx23Bx2QGx2MtwBx270T83tq4:57BmOTchwTnuL
- TLSH T11D52B413F3C019159A9F4A60A583377D3F3D91DA9F624D38A98A7B3E0B4CCE386D1649
- MD5 SHA1 SHA512 SSDEEP TLSH
email-plain-1.txt
- SHA256 9ae016ee764b69ae942c8ff8999f470a04b6f86ded6015b99f2836669e84a237
- MD5 6cb587c257548e031e3eb41412615a37
- SHA1 a77138d034300ee7ce5e9b1192957c98d1bc17ba
- SHA512 86910ef79ddc96f7544d212c7ec9701a49cbb21fea48fd61504b554ed5ce0eec759ae1cad9eefab60adb3b846da6db7c08a89ab02675d9a3a2c90d0c18cfd91f
- TLSH T10101FEFF259A624E171B02AAFA2284463E0B1117D6DEE215E004C02F46C2ABE1CFC85D
- MD5 SHA1 SHA512 TLSH
fsfsf fsfsf - Payslip for Month.pdf
- SHA256 68e49cb5cc8c301d26a287228f3b8b3e4d0c2ea852dc18900aa9570f40c3a5c1
- MD5 33e964a2d39c7219e0a68904fd55f65d
- SHA1 313b31b6c0f2cb1116640a44f5df02c45345c319
- SHA512 86b9f1738c8977067b433e736f99577fdcaa4f2a6e9c5c5e70feb643ef9bf48fe3b7ea8e1001b7933e18905a7d5f486e9c9e6a8b14ef1a0095e7f5757fe290c7
- SSDEEP 384:T/JOxoP2yxQ5P9wZW4DOReAjM6PsqpMArJSpTUsPnRLcsRWDgg4H2fjJBRSeb1WT:kP2ZWM6Pw3pxRLhgfB9sO095KQpY5w
- TLSH T122D29E208D9828CCE942A7E36F6534169E5FF2E355C89AC1742D88C75381FCB9EB2D64
- MD5 SHA1 SHA512 SSDEEP TLSH
Password
1234