Resubmissions

10/08/2026, 23:12

260810-26y23abb523

10/08/2026, 23:08

260810-24mw1sbn3z3

10/08/2026, 23:05

260810-2228xswsht3

10/08/2026, 23:02

260810-2z9j8awse13

10/08/2026, 22:16

260810-16ykvsah663

General

  • Target
    message__MN2PR13MB339079C22CB17370C549756CABDE2_MN2PR13MB3390_namprd13_prod_outlook_com_.eml
  • Size 219KB
  • Sample260810-26y23abb52
  • SHA256 3eb62d3bbfad5f1a5ce53ad2b1325ffff851d573db48af08922167a20a600043
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • message__MN2PR13MB339079C22CB17370C549756CABDE2_MN2PR13MB3390_namprd13_prod_outlook_com_.eml
    .eml 219KB
  • OJEKV59O9I2R07TMYS.pdf
    .pdf 122KB
  • XLLX1XGVT5H8T4.pdf
    .pdf 22KB

message__MN2PR13MB339079C22CB17370C549756CABDE2_MN2PR13MB3390_namprd13_prod_outlook_com_.eml

  • SHA256 3eb62d3bbfad5f1a5ce53ad2b1325ffff851d573db48af08922167a20a600043
  • MD5 SHA1 SHA512 SSDEEP TLSH
Password
123

Email Headers

Return-Path

[email protected]

Date

Mon, 10 Aug 2026 15:57:29 +0000

Subject

=?Windows-1252?Q?let_me_know_your_thoughts_=97_the_details_on_file?=

Content-Type

multipart/mixed; boundary="_003_MN2PR13MB339079C22CB17370C549756CABDE2MN2PR13MB3390namp_"

Received

from sn4pr0501cu005.outbound.protection.outlook.com (mail-southcentralusazlp17011027.outbound.protection.outlook.com [40.93.14.27]) by mx0b-00797a01.pphosted.com (PPS) with ESMTPS id 4fxqm4h1c1-1 (version=TLSv1.3 cipher=TLS_AES_256_GCM_SHA384 bits=256 verify=NOT) for <[email protected]>; Mon, 10 Aug 2026 09:59:48 -0600 (CST)

from PH7P221CA0033.NAMP221.PROD.OUTLOOK.COM (2603:10b6:510:33c::25) by DS7PR12MB9473.namprd12.prod.outlook.com (2603:10b6:8:252::5) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.292.25; Mon, 10 Aug 2026 15:57:35 +0000

from SN1PEPF0002636A.namprd02.prod.outlook.com (2603:10b6:510:33c:cafe::9e) by PH7P221CA0033.outlook.office365.com (2603:10b6:510:33c::25) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.292.25 via Frontend Transport; Mon, 10 Aug 2026 15:57:35 +0000

from mx0b-00797a01.pphosted.com (205.220.180.127) by SN1PEPF0002636A.mail.protection.outlook.com (10.167.241.135) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.315.6 via Frontend Transport; Mon, 10 Aug 2026 15:57:34 +0000

from pps.filterd (m0307835.ppops.net [127.0.0.1]) by mx0b-00797a01.pphosted.com (8.18.1.11/8.18.1.11) with ESMTP id 67AFYEDP1177090 for <[email protected]>; Mon, 10 Aug 2026 09:57:34 -0600

from ppops.net (localhost [127.0.0.1]) by mx0b-00797a01.pphosted.com (PPS) with ESMTPS id 4fxkxfs4fq-1 (version=TLSv1.3 cipher=TLS_AES_256_GCM_SHA384 bits=256 verify=NOT) for <[email protected]>; Mon, 10 Aug 2026 09:57:34 -0600 (CST)

from m0307835.ppops.net (m0307835.ppops.net [127.0.0.1]) by pps.default (8.18.1.12/8.18.1.12) with ESMTP id 67AFsid51217976 for <[email protected]>; Mon, 10 Aug 2026 09:57:34 -0600

from dm5pr21cu001.outbound.protection.outlook.com (mail-centralusazolkn19011024.outbound.protection.outlook.com [52.103.13.24]) by mx0b-00797a01.pphosted.com (PPS) with ESMTPS id 4fxkxfs4fn-1 (version=TLSv1.3 cipher=TLS_AES_256_GCM_SHA384 bits=256 verify=NOT) for <[email protected]>; Mon, 10 Aug 2026 09:57:32 -0600 (CST)

from MN2PR13MB3390.namprd13.prod.outlook.com (2603:10b6:208:163::11) by SJ0PR13MB984402.namprd13.prod.outlook.com (2603:10b6:a03:409::13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.292.25; Mon, 10 Aug 2026 15:57:29 +0000

from MN2PR13MB3390.namprd13.prod.outlook.com ([fe80::c1ee:d679:d985:5e28]) by MN2PR13MB3390.namprd13.prod.outlook.com ([fe80::c1ee:d679:d985:5e28%6]) with mapi id 15.21.0292.024; Mon, 10 Aug 2026 15:57:29 +0000

Received-Spf

Pass (protection.outlook.com: domain of hotmail.com designates 52.103.13.24 as permitted sender) receiver=protection.outlook.com; client-ip=52.103.13.24; helo=dm5pr21cu001.outbound.protection.outlook.com; pr=C

Message-Id

<MN2PR13MB339079C22CB17370C549756CABDE2@MN2PR13MB3390.namprd13.prod.outlook.com>