General

  • Target
    94798175-4846-c288-b79f-e5164a4d9411.eml
  • Size 34KB
  • Sample260810-zcsxvaae35
  • SHA256 041ae0bd041107bb4d6a2a0208d018266e2fe7560a8410c821bf0bc3be77de38
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • 94798175-4846-c288-b79f-e5164a4d9411.eml
    .eml 34KB
  • email-html-1.txt
    .html 24KB

94798175-4846-c288-b79f-e5164a4d9411.eml

  • SHA256 041ae0bd041107bb4d6a2a0208d018266e2fe7560a8410c821bf0bc3be77de38
  • MD5 SHA1 SHA512 SSDEEP TLSH
Password
Yankees

Email Headers

Return-Path

bounces+[email protected]

Date

Wed, 15 Jul 2026 14:33:18 +0000 (UTC)

Subject

SOLD.com Referral Report for July 14 2026

Content-Type

text/html; charset=utf-8

Received

from BY3PR18MB4609.namprd18.prod.outlook.com (2603:10b6:a03:3c0::10) by DM4PR18MB4286.namprd18.prod.outlook.com with HTTPS; Wed, 15 Jul 2026 14:33:22 +0000

from PH8PR07CA0028.namprd07.prod.outlook.com (2603:10b6:510:2cf::23) by BY3PR18MB4609.namprd18.prod.outlook.com (2603:10b6:a03:3c0::10) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.223.12; Wed, 15 Jul 2026 14:33:19 +0000

from CY4PEPF0000EDD7.namprd03.prod.outlook.com (2603:10b6:510:2cf:cafe::a1) by PH8PR07CA0028.outlook.office365.com (2603:10b6:510:2cf::23) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.223.12 via Frontend Transport; Wed, 15 Jul 2026 14:33:19 +0000

from wfbtqnbs.outbound-mail.sendgrid.net (159.183.66.182) by CY4PEPF0000EDD7.mail.protection.outlook.com (10.167.241.203) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.223.9 via Frontend Transport; Wed, 15 Jul 2026 14:33:19 +0000

by recvd-b468565f6-hz6rw with SMTP id recvd-b468565f6-hz6rw-1-6A579A2E-5D 2026-07-15 14:33:18.480977175 +0000 UTC m=+489111.430850442

from ODAyNTU1MQ (unknown) by geopod-ismtpd-44 (SG) with HTTP id LwVWHo9iSLaz0Nuor2KNxA Wed, 15 Jul 2026 14:33:18.468 +0000 (UTC)

Received-Spf

Pass (protection.outlook.com: domain of em2541.sold.com designates 159.183.66.182 as permitted sender) receiver=protection.outlook.com; client-ip=159.183.66.182; helo=wfbtqnbs.outbound-mail.sendgrid.net; pr=C

Message-Id

<LwVWHo9iSLaz0Nuor2KNxA@geopod-ismtpd-44>