General

  • Target
    Fraude.eml
  • Size 562KB
  • Sample260810-gn844ack51
  • SHA256 2ef12799724f5b6bcd10392eb9aed31bae034566d388a6ee5c6f47a8898df5d3
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • Fraude.eml
    .eml 562KB
  • 31117.jpg
    .jpg 385KB
  • email-html-2.txt
    .html 1KB
  • email-plain-1.txt
    398B

Fraude.eml

  • SHA256 2ef12799724f5b6bcd10392eb9aed31bae034566d388a6ee5c6f47a8898df5d3
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

alertaseguranca+[email protected]

Date

Sat, 8 Aug 2026 13:18:17 +0100

Subject

Fraude

Content-Type

multipart/related; boundary="0000000000006bfd850658881e94"

Received

from VI1PR03MB6206.eurprd03.prod.outlook.com (2603:10a6:800:132::13) by AM6PR03MB4568.eurprd03.prod.outlook.com with HTTPS; Sat, 8 Aug 2026 12:18:47 +0000

from AM9P250CA0012.EURP250.PROD.OUTLOOK.COM (2603:10a6:20b:21c::17) by VI1PR03MB6206.eurprd03.prod.outlook.com (2603:10a6:800:132::13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.292.25; Sat, 8 Aug 2026 12:18:43 +0000

from AMS1EPF00000091.eurprd05.prod.outlook.com (2603:10a6:20b:21c:cafe::37) by AM9P250CA0012.outlook.office365.com (2603:10a6:20b:21c::17) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.292.21 via Frontend Transport; Sat, 8 Aug 2026 12:18:43 +0000

from nat.eu.perception-point.io (99.80.189.20) by AMS1EPF00000091.mail.protection.outlook.com (10.167.242.88) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.315.6 via Frontend Transport; Sat, 8 Aug 2026 12:18:43 +0000

from DB6PR07CU003.outbound.protection.outlook.com (mail-db6pr07cu00300.outbound.protection.outlook.com [40.93.64.88]) by inbound-smtp.eu-west-1.amazonaws.com with SMTP id sbjvq2c6fpbdopq545ekk0pcv4cbnlahs7u6okg1 for [email protected]; Sat, 08 Aug 2026 12:18:39 +0000 (UTC)

from AS8PR04CA0134.eurprd04.prod.outlook.com (2603:10a6:20b:127::19) by AS2PR03MB9954.eurprd03.prod.outlook.com (2603:10a6:20b:62e::15) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.292.24; Sat, 8 Aug 2026 12:18:36 +0000

from AMS1EPF0000004E.eurprd04.prod.outlook.com (2603:10a6:20b:127:cafe::91) by AS8PR04CA0134.outlook.office365.com (2603:10a6:20b:127::19) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.292.24 via Frontend Transport; Sat, 8 Aug 2026 12:18:36 +0000

from GVXPR05CU001.outbound.protection.outlook.com (2a01:111:f403:c202::7) by AMS1EPF0000004E.mail.protection.outlook.com (2603:10a6:20f:fff4:0:8:0:b) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.315.6 via Frontend Transport; Sat, 8 Aug 2026 12:18:36 +0000

from AS9PR05CA0300.eurprd05.prod.outlook.com (2603:10a6:20b:492::22) by AS2PR10MB6638.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:55d::10) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.292.25; Sat, 8 Aug 2026 12:18:31 +0000

from AMS1EPF00000045.eurprd04.prod.outlook.com (2603:10a6:20b:492:cafe::44) by AS9PR05CA0300.outlook.office365.com (2603:10a6:20b:492::22) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.292.25 via Frontend Transport; Sat, 8 Aug 2026 12:18:31 +0000

from mail-lj1-x22a.google.com (2a00:1450:4864:20::22a) by AMS1EPF00000045.mail.protection.outlook.com (2603:10a6:20f:fff4:0:2:0:a) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.315.6 via Frontend Transport; Sat, 8 Aug 2026 12:18:30 +0000

by mail-lj1-x22a.google.com with SMTP id 38308e7fff4ca-39eb257e9fbso2296681fa.0 for <[email protected]>; Sat, 08 Aug 2026 05:18:30 -0700 (PDT)

X-Received

by 2002:a2e:a883:0:b0:39d:b60e:d70e with SMTP id 38308e7fff4ca-39fbb1ae899mr35435671fa.3.1786191509443; Sat, 08 Aug 2026 05:18:29 -0700 (PDT)

Received-Spf

Fail (protection.outlook.com: domain of wizink.pt does not designate 99.80.189.20 as permitted sender) receiver=protection.outlook.com; client-ip=99.80.189.20; helo=nat.eu.perception-point.io;

pass (spfCheck: domain of wizink.pt designates 40.93.64.88 as permitted sender) client-ip=40.93.64.88; envelope-from=alertaseguranca+[email protected]; helo=DB6PR07CU003.outbound.protection.outlook.com;

Pass (protection.outlook.com: domain of wizink.pt designates 2a01:111:f403:c202::7 as permitted sender) receiver=protection.outlook.com; client-ip=2a01:111:f403:c202::7; helo=GVXPR05CU001.outbound.protection.outlook.com; pr=C

Pass (protection.outlook.com: domain of gmail.com designates 2a00:1450:4864:20::22a as permitted sender) receiver=protection.outlook.com; client-ip=2a00:1450:4864:20::22a; helo=mail-lj1-x22a.google.com; pr=C

Message-Id

<CAGgfXKHYozMmc47CajiQOYspHUKSTzZYo5D-A-z2UN_cGOQ3cg@mail.gmail.com>