Overview

overview

3

Static

static

1

phish_aler...1).eml

windows10-2004-x64

1

phish_aler...1).eml

windows11-ltsc_2024-x64

1

email-html-1.html

windows10-2004-x64

3

email-html-1.html

windows11-ltsc_2024-x64

3

row_99_10.png

windows10-2004-x64

1

row_99_10.png

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    phish_alert_sp2_2.0.0.0 (1).eml
  • Size 4.4MB
  • Sample260805-wsavesdb38
  • SHA256 81bbea7843f01e745ce0f064b0cbbf29d520235864cf963fbaa675bb4f7db0aa
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • phish_alert_sp2_2.0.0.0 (1).eml
    .eml 4.4MB
  • email-html-1.txt
    .html 11KB
  • row_99_10.png
    .png 3.2MB

phish_alert_sp2_2.0.0.0 (1).eml

  • SHA256 81bbea7843f01e745ce0f064b0cbbf29d520235864cf963fbaa675bb4f7db0aa
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

[email protected]

Date

Wed, 5 Aug 2026 14:53:49 +0000

Subject

=?UTF-8?B?W0VYVEVSTkFMXSBRdWVzdGlvbiBSZWdhcmRpbmcgWW91ciBQbGFu?= =?UTF-8?B?dCdzIFByb3BhbmUgU3RvcmFnZSBUYW5rcw==?=

Content-Type

multipart/mixed; boundary="----sinikael-?=_1-17859510581830.3538181471281079"

Received

from EA2PR16MB6322.namprd16.prod.outlook.com (::1) by SJ2PR16MB6039.namprd16.prod.outlook.com with HTTPS; Wed, 5 Aug 2026 14:54:06 +0000

from DS7PR05CA0029.namprd05.prod.outlook.com (2603:10b6:5:3b9::34) by EA2PR16MB6322.namprd16.prod.outlook.com (2603:10b6:303:24e::10) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.292.19; Wed, 5 Aug 2026 14:54:00 +0000

from SA2PEPF000015CC.namprd03.prod.outlook.com (2603:10b6:5:3b9:cafe::6d) by DS7PR05CA0029.outlook.office365.com (2603:10b6:5:3b9::34) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.315.5 via Frontend Transport; Wed, 5 Aug 2026 14:53:58 +0000

from BN1PR04CU002.outbound.protection.outlook.com (2a01:111:f403:c110::1) by SA2PEPF000015CC.mail.protection.outlook.com (2603:10b6:82c:400:0:1003:0:a) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.315.6 via Frontend Transport; Wed, 5 Aug 2026 14:53:57 +0000

from LV8PR13MB6681.namprd13.prod.outlook.com (2603:10b6:408:222::11) by CH2PR13MB3623.namprd13.prod.outlook.com (2603:10b6:610:98::16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.292.19; Wed, 5 Aug 2026 14:53:50 +0000

from LV8PR13MB6681.namprd13.prod.outlook.com ([fe80::68d5:37f7:a580:5a33]) by LV8PR13MB6681.namprd13.prod.outlook.com ([fe80::68d5:37f7:a580:5a33%7]) with mapi id 15.21.0270.017; Wed, 5 Aug 2026 14:53:49 +0000

Received-Spf

Pass (protection.outlook.com: domain of storagetankspropane.com designates 2a01:111:f403:c110::1 as permitted sender) receiver=protection.outlook.com; client-ip=2a01:111:f403:c110::1; helo=BN1PR04CU002.outbound.protection.outlook.com; pr=C

Message-Id

<LV8PR13MB66813D59A99E6EB00EFA8E31BFD32@LV8PR13MB6681.namprd13.prod.outlook.com>

Extracted URLs

  • file https://aka.ms/LearnAboutSenderIdentification