Overview

overview

4

Static

static

1

bQw2SHR-_n...2Z.eml

windows10-2004-x64

4

bQw2SHR-_n...2Z.eml

windows11-ltsc_2024-x64

1

Resubmissions

10/08/2026, 10:21

260810-mdv3da1wby4

10/08/2026, 09:28

260810-lfggbsfc254

Sharing

Copy URL Twitter E-mail

General

  • Target
    bQw2SHR-_n6vaIZWtXy7HDf9kMIXB45i_2026-08-10T09_22_59.932Z.eml
  • Size 46KB
  • Sample260810-lfggbsfc25
  • SHA256 8016f07e719686467754e4e6498cda52354d0f9e6955426b0693cdc61a9c99df
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • bQw2SHR-_n6vaIZWtXy7HDf9kMIXB45i_2026-08-10T09_22_59.932Z.eml
    .eml 46KB
  • email-html-2.txt
    26KB
  • email-plain-1.txt
    3KB

bQw2SHR-_n6vaIZWtXy7HDf9kMIXB45i_2026-08-10T09_22_59.932Z.eml

  • SHA256 8016f07e719686467754e4e6498cda52354d0f9e6955426b0693cdc61a9c99df
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

bounces+[email protected]

Date

Thu, 30 Jul 2026 17:30:00 +0000 (UTC)

Subject

Reminder: USAA - San Antonio_Sodexo_Catering Team Training_Catering Add-On starts in 1 hour

Content-Type

multipart/alternative; boundary=76a45281894dae5a3791da29aaf18f3092ec1c925658c5efae50cdf58af4

Received

from PAWPR02MB9760.eurprd02.prod.outlook.com (2603:10a6:102:2f2::9) by AM7PR02MB6019.eurprd02.prod.outlook.com with HTTPS; Thu, 30 Jul 2026 17:30:10 +0000

from DUZPR01CA0001.eurprd01.prod.exchangelabs.com (2603:10a6:10:3c3::10) by PAWPR02MB9760.eurprd02.prod.outlook.com (2603:10a6:102:2f2::9) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.245.12; Thu, 30 Jul 2026 17:30:04 +0000

from DU2PEPF00028D05.eurprd03.prod.outlook.com (2603:10a6:10:3c3:cafe::8e) by DUZPR01CA0001.outlook.office365.com (2603:10a6:10:3c3::10) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.270.14 via Frontend Transport; Thu, 30 Jul 2026 17:30:03 +0000

from mx07-00009201.pphosted.com (185.132.180.224) by DU2PEPF00028D05.mail.protection.outlook.com (10.167.242.165) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.292.8 via Frontend Transport; Thu, 30 Jul 2026 17:30:03 +0000

from pps.filterd (m0168937.ppops.net [127.0.0.1]) by mx07-00009201.pphosted.com (8.18.1.11/8.18.1.11) with ESMTP id 66UGY9nH2878950 for <[email protected]>; Thu, 30 Jul 2026 17:30:03 GMT

from o28.logmeininc.com (o28.logmeininc.com [149.72.155.253]) by mx07-00009201.pphosted.com (PPS) with ESMTPS id 4fr8w11jep-1 (version=TLSv1.3 cipher=TLS_AES_128_GCM_SHA256 bits=128 verify=NOT) for <[email protected]>; Thu, 30 Jul 2026 17:30:02 +0000 (GMT)

by recvd-67f58647fc-7cb5c with SMTP id recvd-67f58647fc-7cb5c-1-6A6B8A18-21 2026-07-30 17:30:00.25788718 +0000 UTC m=+167869.021359405

from MjEyOTQ1NQ (unknown) by geopod-ismtpd-canary-0 (SG) with HTTP id UssdnDwFRou5FFG2GYmyhQ Thu, 30 Jul 2026 17:30:00.235 +0000 (UTC)

Received-Spf

Pass (protection.outlook.com: domain of msg.gototraining.com designates 149.72.155.253 as permitted sender) receiver=protection.outlook.com; client-ip=149.72.155.253; helo=o28.logmeininc.com; pr=C

Message-Id

<UssdnDwFRou5FFG2GYmyhQ@geopod-ismtpd-canary-0>

Extracted URLs

  • file https://apps.apple.com/app/goto/id1465614785

  • file https://apps.apple.com/app/goto/id1465614785__;!!P5FZM7ryyeY!XiM0QWdzxWUXSUuMIgrZLrpRYqZx9zICenFeMool9QXKcbfic8fgbGpLn7HJb6A5fk5guFwpQnCY7DOEl4p3Tx_dIUnI$

  • file https://attendee.gototraining.com/8dx74/cancel/6338148429367252225/3361565943931035905*cancelModal

  • file https://attendee.gototraining.com/8dx74/cancel/6338148429367252225/3361565943931035905__;!!P5FZM7ryyeY!XiM0QWdzxWUXSUuMIgrZLrpRYqZx9zICenFeMool9QXKcbfic8fgbGpLn7HJb6A5fk5guFwpQnCY7DOEl4p3T9S3FQZx$

  • file https://attendee.gototraining.com/subscription.tmpl?organizerEmail=nicole.morris*40catertrax.com&attendeeEmail=lana.hicks*40sodexo.com&locale=en_US

  • file https://attendee.gototraining.com/subscription.tmpl?organizerEmail=nicole.morris*40catertrax.com&attendeeEmail=lana.hicks*40sodexo.com&locale=en_US__;JSU!!P5FZM7ryyeY!XiM0QWdzxWUXSUuMIgrZLrpRYqZx9zICenFeMool9QXKcbfic8fgbGpLn7HJb6A5fk5guFwpQnCY7DOEl4p3T5ux_IqO$

  • file https://global.gototraining.com/join/training/6338148429367252225/107245687

  • file https://global.gototraining.com/join/training/6338148429367252225/107245687__;!!P5FZM7ryyeY!XiM0QWdzxWUXSUuMIgrZLrpRYqZx9zICenFeMool9QXKcbfic8fgbGpLn7HJb6A5fk5guFwpQnCY7DOEl4p3T_9orb_A$

  • file https://global.gototraining.com/training/icsCalendar.tmpl?training=6338148429367252225&user=107245687

  • Show all