General

  • Target
    d36572b2-2a76-bfc3-a6bb-7820a5a0805b.eml
  • Size 4.8MB
  • Sample260810-lfc4xafc22
  • SHA256 9888ac439a3f157f3cf339fee7a7a6e1ed0ea523fce5695e595f32a64b150558
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • d36572b2-2a76-bfc3-a6bb-7820a5a0805b.eml
    .eml 4.8MB
  • Authorization, distributor letter.docx
    .docx 14KB
  • Lot 1_PDC27 Compex.rar
    .rar 1.5MB
  • 800256.docx
    .docx 189KB
  • 800257.docx
    .docx 186KB
  • 800294.docx
    .docx 177KB
  • 800297.docx
    .docx 185KB
  • EN SP.531.DE-FO.01.docx
    .docx 16KB
  • EN SP.531.DE.docx
    .docx 603KB
  • Schema PDC27_1.pdf
    .pdf 270KB
  • Lot 2_PD114.rar
    .rar 1.7MB
  • 800252.docx
    .docx 179KB
  • 800253.docx
    .docx 180KB
  • 800938.docx
    .docx 191KB
  • 800939.docx
    .docx 190KB
  • 800942.docx
    .docx 191KB
  • 800943.docx
    .docx 168KB
  • EN SP.530.DE-FO.01.docx
    .docx 21KB
  • EN SP.530.DE.docx
    .docx 588KB
  • Schema.pdf
    .pdf 125KB
  • email-html-2.txt
    .html 24KB
  • email-plain-1.txt
    5KB
  • image.png
    .png 303KB
  • image001.png
    .png 3KB
  • ~WRD0002.jpg
    .jpg 823B

d36572b2-2a76-bfc3-a6bb-7820a5a0805b.eml

  • SHA256 9888ac439a3f157f3cf339fee7a7a6e1ed0ea523fce5695e595f32a64b150558
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

In-Reply-To

CAAqm49SYApobNG2aRCtmR4PF70kJmRSqaxgLDQJr-AVStJJrXA@mail.gmail.com

Date

Wed, 5 Aug 2026 11:49:38 +0000

Subject

FW: 26/PED/RFQ_947 MV Switchgear

Content-Type

multipart/mixed; boundary="_010_LO2P123MB54625C76FEC766FA6A406661FAD32LO2P123MB5462GBRP_"

Received

from LO2P123MB5462.GBRP123.PROD.OUTLOOK.COM (2603:10a6:600:231::10) by LOBP123MB8973.GBRP123.PROD.OUTLOOK.COM (2603:10a6:600:4c4::9) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.292.19; Wed, 5 Aug 2026 11:49:38 +0000

from LO2P123MB5462.GBRP123.PROD.OUTLOOK.COM ([fe80::6aef:9921:4e06:7951]) by LO2P123MB5462.GBRP123.PROD.OUTLOOK.COM ([fe80::6aef:9921:4e06:7951%6]) with mapi id 15.21.0270.018; Wed, 5 Aug 2026 11:49:38 +0000

Message-Id

<LO2P123MB54625C76FEC766FA6A406661FAD32@LO2P123MB5462.GBRP123.PROD.OUTLOOK.COM>

Extracted URLs

  • file http://www.lucyelectric.com/

  • file https://aka.ms/LearnAboutSenderIdentification

  • file https://aka.ms/o0ukef