Overview

overview

3

Static

static

1

df1d0d85-7...74.eml

windows11-21h2-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    df1d0d85-7588-878d-b5a7-9a6484f04474.eml
  • Size 69KB
  • Sample260812-e4mvpayelc
  • SHA256 7272ee2a5ece89ea602e9cf69b27ec84b6b41a5d23c3c92d36c4b98de8b6aca6
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • df1d0d85-7588-878d-b5a7-9a6484f04474.eml
    .eml 69KB
  • email-html-2.txt
    .html 44KB
  • email-plain-1.txt
    11KB

df1d0d85-7588-878d-b5a7-9a6484f04474.eml

  • SHA256 7272ee2a5ece89ea602e9cf69b27ec84b6b41a5d23c3c92d36c4b98de8b6aca6
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

bounces+40859938-d032-mark.dutton=harperbro.com@em3882.primeindependentliving.com

Date

Wed, 12 Aug 2026 00:37:11 +0000 (UTC)

Subject

Billing Statement Records Flow

Content-Type

multipart/alternative; boundary="--_NmP-b5c7f1b3458fbd84-Part_1"

Received

from DM3PPF30084BD26.namprd18.prod.outlook.com (2603:10b6:f:fc00::69a) by IA2PR18MB5849.namprd18.prod.outlook.com with HTTPS; Wed, 12 Aug 2026 00:37:51 +0000

from BY3PR04CA0029.namprd04.prod.outlook.com (2603:10b6:a03:217::34) by DM3PPF30084BD26.namprd18.prod.outlook.com (2603:10b6:f:fc00::69a) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.292.21; Wed, 12 Aug 2026 00:37:15 +0000

from CO1PEPF000075F2.namprd03.prod.outlook.com (2603:10b6:a03:217:cafe::2d) by BY3PR04CA0029.outlook.office365.com (2603:10b6:a03:217::34) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.315.11 via Frontend Transport; Wed, 12 Aug 2026 00:37:14 +0000

from s.wfbtzhsb.outbound-mail.sendgrid.net (159.183.224.107) by CO1PEPF000075F2.mail.protection.outlook.com (10.167.249.41) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.315.6 via Frontend Transport; Wed, 12 Aug 2026 00:37:13 +0000

by recvd-79d65b999-snl5b with SMTP id recvd-79d65b999-snl5b-1-6A7BC037-11 2026-08-12 00:37:11.118709559 +0000 UTC m=+1230232.767776874

from mail.primeindependentliving.com (unknown) by geopod-ismtpd-58 (SG) with ESMTP id PyLa_-_LTpaVCkgeqON1Ww for <[email protected]>; Wed, 12 Aug 2026 00:37:10.933 +0000 (UTC)

Received-Spf

Pass (protection.outlook.com: domain of em3882.primeindependentliving.com designates 159.183.224.107 as permitted sender) receiver=protection.outlook.com; client-ip=159.183.224.107; helo=s.wfbtzhsb.outbound-mail.sendgrid.net; pr=C

X-Mailer

Microsoft Outlook 16.0.17231

Message-Id

<[email protected]>

Extracted URLs

  • file https://click.em.stellantis-fs.com/?qs=ABB7InYiOjEsImQiOjQ5NjB9AA0AAAAAANzgt54-120ILrOWAuAZukbqC27nMsb72ZpldjPkqwOA2J3ngcUR7JwPdYeaaOrtCvknigZzE34oTce4i1HP1u3_ML6dp0fpd0vjFg

  • file https://click.em.stellantis-fs.com/?qs=ABB7InYiOjEsImQiOjQ5NjB9AA0AAAAAANzgt54-120ILrOWAuAZukbqC27nMsb72ZpldjPkqwOA2J3ngcUR7JwPdYeaaOrtCvknigZzE34oTce4i1HP1u3_ML6dp0fpd0vjFg)

  • file https://click.em.stellantis-fs.com/?qs=ABB7InYiOjEsImQiOjQ5NjB9AA0AAAAAANzgt5425J6kjQZ-K6mj3OXabcysr2YXaGoMAn_xC4keyU61ZCImPWtBSjdwHyt7EqSSE0Pu7op_d-q3Q76NTtPtmr82dMAaJs72xQ

  • file https://click.em.stellantis-fs.com/?qs=ABB7InYiOjEsImQiOjQ5NjB9AA0AAAAAANzgt5425J6kjQZ-K6mj3OXabcysr2YXaGoMAn_xC4keyU61ZCImPWtBSjdwHyt7EqSSE0Pu7op_d-q3Q76NTtPtmr82dMAaJs72xQ)

  • file https://click.em.stellantis-fs.com/?qs=ABB7InYiOjEsImQiOjQ5NjB9AA0AAAAAANzgt546e_BB3WRrVllnH2yiORQZOnH9WN0se7PxqnszIuaOUPGvFxbszZA1u8aHQdxe5pgO3qh-sQQNYvOprZi1AP5Pddc9tneMhg

  • file https://click.em.stellantis-fs.com/?qs=ABB7InYiOjEsImQiOjQ5NjB9AA0AAAAAANzgt546e_BB3WRrVllnH2yiORQZOnH9WN0se7PxqnszIuaOUPGvFxbszZA1u8aHQdxe5pgO3qh-sQQNYvOprZi1AP5Pddc9tneMhg)

  • file https://click.em.stellantis-fs.com/?qs=ABB7InYiOjEsImQiOjQ5NjB9AA0AAAAAANzgt5471AOnlz552ptby0PFnkS88i5S3eV6Rr-ghlR5ANXIRn79_ZIoEyTabK8kuB2TOR9V0Djt5IE7JhvD9tFL_2TxRmkgYgdBMg

  • file https://click.em.stellantis-fs.com/?qs=ABB7InYiOjEsImQiOjQ5NjB9AA0AAAAAANzgt5471AOnlz552ptby0PFnkS88i5S3eV6Rr-ghlR5ANXIRn79_ZIoEyTabK8kuB2TOR9V0Djt5IE7JhvD9tFL_2TxRmkgYgdBMg)

  • file https://click.em.stellantis-fs.com/?qs=ABB7InYiOjEsImQiOjQ5NjB9AA0AAAAAANzgt548Ms7EyPcPZcGssCIfcUHmxf9sQ6orOtgJ52wnSMoMAmzx0BjMoCIWxxgVusK9hBwxAkHjWcVyVVU6pgdDc4i3EaEeWIT0mA

  • Show all