RE _oi__m_ss_g_ 0033 s___onds ___s l_ft from yo__ from _ r___i_i_nt in yo__r _ont__t list[.]eml[.]zip

RE _oi__m_ss_g_ 0033 s_onds _s l_ft from yo__ from _ r___i_i_nt in yo__r _ont__t list.eml.zip

SHA256 163b4fc056b31a19dbea8e657da45a3ac8939dbf5665046fb4fbaa026b85ab03
MD5 b2a3a258786442745940dc24bba44509
SHA1 8bdb5d8fcb3f24d25b3ebddbe979151fbaceee91
SHA512 0a75a60a131245aa7e3255748abf30b15455157b308b78ca29d4cbb41a96b1b3af33133f8d41c587b75dbb6f785c17fe72ba11695a9c5a1cd3a5b6a6ecb5bc57
SSDEEP 384:JdLwxmRznjUZoGT/4ZsCtgA3V7aGvBezkSyLW2BAk5c50ym6tkpXtO7+:kxIzjK74ZsCxRlvIkSyLWUAk5c50H6te
TLSH
T10582D148444AA25DEEB5869E7488732CE7CD775595C0EE540CA9BD1D2BF3387C9122F0
MD5 SHA1 SHA512 SSDEEP TLSH

Password

infected

RE _oi__m_ss_g_ 0033 s_onds _s l_ft from yo__ from _ r___i_i_nt in yo__r _ont__t list.eml

SHA256 e91193a83a79f1c53b6049109ad213caca38f392dee3c1ba0e74cfd0358f1238
MD5 cfc00507eaefac22ebc190b2afc4d005
SHA1 32aa806a0ed854d0c435176effdf34f4849e7528
SHA512 8ef2450ad5c7f50ba02d8995aabbc17f031013e2b4a0252c938721db2269b5f6f1ba166f730db7d60b88c687ebe7ccd3692adad3a2c29fc1df35a352bcbd4a17
SSDEEP 768:jKtYvg+lt68Nr0Gy/lpQ9xkZ+KgqssoMNWdZUNjGzEaZ5tE4vWd:xvwNGy/lpqkZ+KgqsZIaZQQWd
TLSH
T18E4339E16CE60771E4751D90AC0E7BD279737ECF22E1A085693C8FC6E929EE018D12D9
MD5 SHA1 SHA512 SSDEEP TLSH

Password

infected

Email Headers

To

[email protected]

From

[email protected]

In-Reply-To

CYXPR10MB7973858A8C096DA0CFB10D3BDF91A@CYXPR10MB7973.namprd10.prod.outlook.com

Date

Wed, 14 May 2025 15:14:25 +0000

Subject

=?utf-8?B?UkU6IOqTpm9p6q6v0LVt0LVzc9CwZ9C1IDAwOjMzIHPQtfCQkL1vbmRzIA==?= =?utf-8?B?8J2XkNCwcyBs0LVmdCBmcm9tIHlv8JCTtiBmcm9tINCwIHLQtfCQkL1p0YBp?= =?utf-8?B?0LVudCBpbiB5b/CQk7ZyIOqur29udNCw6q6vdCBsaXN0?=

Content-Type

multipart/related; boundary="_004_BN0PR10MB5158D3AE451895D52B70D7B9D891ABN0PR10MB5158namp_"; type="multipart/alternative"

Received

from SJ1PR10MB5932.namprd10.prod.outlook.com (2603:10b6:a03:489::16) by DS7PR10MB4990.namprd10.prod.outlook.com with HTTPS; Wed, 14 May 2025 15:14:27 +0000

from BN0PR10MB5158.namprd10.prod.outlook.com (2603:10b6:408:120::18) by SJ1PR10MB5932.namprd10.prod.outlook.com (2603:10b6:a03:489::16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8722.30; Wed, 14 May 2025 15:14:25 +0000

from BN0PR10MB5158.namprd10.prod.outlook.com ([fe80::3200:20be:ca69:707a]) by BN0PR10MB5158.namprd10.prod.outlook.com ([fe80::3200:20be:ca69:707a%7]) with mapi id 15.20.8722.027; Wed, 14 May 2025 15:14:25 +0000

Message-Id

<BN0PR10MB5158D3AE451895D52B70D7B9D891A@BN0PR10MB5158.namprd10.prod.outlook.com>

Extracted URLs

file http://www.veritran.com/
file https://aka.ms/LearnAboutSenderIdentification
file https://help.webex.com
file https://help.webex.com/
file https://jira.veritran.com/browse/CRPM-771
file https://lh3.googleusercontent.com/WR56xTqeYumGFUuzqO_3yAXl8BtuQ8nv9PafTmZXqRMYsF23tMLtz-bhYSS7n96atM_rmI9Ipriim4sj9zDwujz5fBF-B3SHO8S60gN6wWz4a2aG6XCDN2WLXra3mvXvjkqdd9NX]
file https://m-economictimes-com.cdn.ampproject.org/c/s/fontshop.my/68VBt6YW9zcGluYUB2ZXJpdHJhbi5jb20=zq1wGlQa
file https://meet134.webex.com/meet134/j.php?MTID=mee61b1418a5445f08911d096f0dcc92e
file https://www.webex.com/webex_privacy.html
file https://www.webex.com/webex_terms.html
Show all

email-html-2.txt

SHA256 c6aae68265c821f68e0a45e179f987ec4717a1153a59d84f0a01be06bbd889ab
MD5 64380e132ece1438b365047c7a522a17
SHA1 7042e836d8002ff4f666c3f890baa6430d846a42
SHA512 c3ff52c67070aaf5af219af72a3f9e169df8a79e2e7a9a2b19dd94907756fa1c781084cc1b4df2dbc3de2474b90c6563606acf8a2bd505ca39b142818cbcf82a
SSDEEP 768:mP6X64Duwc6pTCf1PbS/MrHpavsAEqwjrGZgM:dX6auw5hCf1PbJr8EqwnGZgM
TLSH
T1E4F20112E7551D56C0FD84F1E0272B689094A39A53161BF0F2EA7F7779C68B22AD338C
MD5 SHA1 SHA512 SSDEEP TLSH

email-plain-1.txt

SHA256 8980e84906dafc605c84147c5cc0345ffd653ce042292ac9abb9a4a50255a922
MD5 5fd3f7d87ff8002f61e53dd4625cbd50
SHA1 51aa56b739b648c2250797f655298955e4c2365b
SHA512 e47a9ddc5d01dc770abd827406bcef180f32c3261485c3e188187177538c46029e79620b90f5ec11bbb23f8fc78cf2197917e0af58274f18992257b25f1cd1c6
TLSH
T18A5187AFA7034006DF7230F5E5CBEC8EB3668646DDC9E3D5B16086452588E25F6E845C
MD5 SHA1 SHA512 TLSH

image001.png

SHA256 c8138b7e3cd9f3f7d5e02e54997f362d23435f1f76aa7e3f78384086945d1538
MD5 35e811aea577011003834016b1774443
SHA1 e0ab9e206cf342a579da9c96485f3ff361dcec6f
SHA512 3e3d603eba52a9aae9da1b6b79c408b855d98e52f770111070ed1312b475b9307fd705b24d766fdc698dbcb5668b471e41f1419de004ed5e9e384750d547cfb4
TLSH
T132613BFC78C10B7B465A1B839E0CB23C8B3663355CB114388AA3D29DE871AA076C1889
MD5 SHA1 SHA512 TLSH

Password

infected

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

RE _oi__m_ss_g_ 0033 s___onds ___s l_ft from yo__ from _ r___i_i_nt in yo__r _ont__t list.eml.zip

RE _oi__m_ss_g_ 0033 s___onds ___s l_ft from yo__ from _ r___i_i_nt in yo__r _ont__t list.eml

Email Headers

Extracted URLs

email-html-2.txt

email-plain-1.txt

image001.png

RE _oi__m_ss_g_ 0033 s_onds _s l_ft from yo__ from _ r___i_i_nt in yo__r _ont__t list.eml.zip

RE _oi__m_ss_g_ 0033 s_onds _s l_ft from yo__ from _ r___i_i_nt in yo__r _ont__t list.eml