General

  • Target
    Message.eml
  • Size 42KB
  • Sample260811-qe9hyaep5s
  • SHA256 b3c63485534c9eaca2d60867c2f992b2cf675fb88ebbb70f9ea51dea5405295c
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • Message.eml
    .eml 42KB
  • attachment-3
    .eml 25KB
  • email-html-2.txt
    .html 12KB
  • email-plain-1.txt
    1KB
  • image.png
    .png 3KB
  • email-html-2.txt
    .html 406B
  • email-plain-1.txt
    2B

Message.eml

  • SHA256 b3c63485534c9eaca2d60867c2f992b2cf675fb88ebbb70f9ea51dea5405295c
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

[email protected]

Date

Mon, 10 Aug 2026 21:24:42 +0000

Subject

Kimberly Dally shared "DJ Unit A Lease ID 25591" with you

Content-Type

multipart/mixed; boundary="_004_SJ0PR09MB115592456D083ADB6F4835AF2C1DE2SJ0PR09MB11559na_"

Received

from CH0PR04CA0115.namprd04.prod.outlook.com (2603:10b6:610:75::30) by PH0PR13MB5316.namprd13.prod.outlook.com (2603:10b6:510:fa::15) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.292.25; Mon, 10 Aug 2026 21:25:10 +0000

from DS2PEPF00003442.namprd04.prod.outlook.com (2603:10b6:610:75:cafe::7b) by CH0PR04CA0115.outlook.office365.com (2603:10b6:610:75::30) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.292.25 via Frontend Transport; Mon, 10 Aug 2026 21:25:10 +0000

from SA9PR09CU002.outbound.protection.outlook.com (40.93.193.35) by DS2PEPF00003442.mail.protection.outlook.com (10.167.17.69) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.315.6 via Frontend Transport; Mon, 10 Aug 2026 21:25:09 +0000

from SJ0PR09MB11559.namprd09.prod.outlook.com (2603:10b6:a03:50a::19) by SA1PR09MB9339.namprd09.prod.outlook.com (2603:10b6:806:280::6) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.292.25; Mon, 10 Aug 2026 21:24:43 +0000

from SJ0PR09MB11559.namprd09.prod.outlook.com ([fe80::64ad:1b2e:9df8:98a3]) by SJ0PR09MB11559.namprd09.prod.outlook.com ([fe80::64ad:1b2e:9df8:98a3%4]) with mapi id 15.21.0292.024; Mon, 10 Aug 2026 21:24:43 +0000

Received-Spf

Pass (protection.outlook.com: domain of rrc.texas.gov designates 40.93.193.35 as permitted sender) receiver=protection.outlook.com; client-ip=40.93.193.35; helo=SA9PR09CU002.outbound.protection.outlook.com; pr=C

Message-Id

<SJ0PR09MB115592456D083ADB6F4835AF2C1DE2@SJ0PR09MB11559.namprd09.prod.outlook.com>