Overview

overview

1

Static

static

1

Get an Aut...ml.msg

windows10-2004-x64

1

Get an Aut...ml.msg

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    Get an Auto Quote from Farmers Insurance in Minutes.eml.msg
  • Size 53KB
  • Sample260814-rs66eaad24
  • SHA256 14bb0e9f19a280b14ec88591fc2402170331a4a6fdac401dc7affe4ed4375920
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • Get an Auto Quote from Farmers Insurance in Minutes.eml.msg
    .msg 53KB

Get an Auto Quote from Farmers Insurance in Minutes.eml.msg

  • SHA256 14bb0e9f19a280b14ec88591fc2402170331a4a6fdac401dc7affe4ed4375920
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

<bounce-OXT4JJGLHCAEBDYKHCVC5CDQL4.120052@bounce.purecareforhealth.com>

Date

Thu, 13 Aug 2026 13:25:06 -0600

Subject

Get an Auto Quote from Farmers Insurance in Minutes

Content-Type

multipart/alternative; boundary="O9yJa1C6g6Z3=_?:"

Received

from 10.217.135.107 by atlas312.free.mail.ne1.yahoo.com pod-id NONE with HTTPS; Thu, 13 Aug 2026 19:25:08 +0000

from 129.77.24.128 (EHLO aps128.mta.exacttarget.com) by 10.217.135.107 with SMTPs (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256); Thu, 13 Aug 2026 19:25:08 +0000

by aps128.mta.exacttarget.com id hfod1839mjc1 for <[email protected]>; Thu, 13 Aug 2026 19:25:06 +0000 (envelope-from <bounce-OXT4JJGLHCAEBDYKHCVC5CDQL4.120052@bounce.purecareforhealth.com>)

Received-Spf

pass (domain of bounce.purecareforhealth.com designates 129.77.24.128 as permitted sender)

Message-Id

<bounce-OXT4JJGLHCAEBDYKHCVC5CDQL4.120052@bounce.purecareforhealth.com>

Extracted URLs

  • file http://bounce.purecareforhealth.com

  • file http://quantamwealthlifthub.com/dewoodoewkodwekodkoewokdokwekodwe/dwekodweokdokwekodokweokdwekodokweokdokweokdokweFarmers/be7de8172206e0e45a445558b3eba6e8

  • file http://trendyvalueshop.com/djiewiodwedidrrddrdeewkodkewounbbdeunbbdeunbunbb/8e6abe3b855544a54e0e6022718ed7eb

  • file https://img.mailinblue.com/11290846/images/content_library/original/6a338e18c414e46b22503a41.png

  • file https://mcusercontent.com/6f0b01a4f199e796c73b73b08/images/eb9b431d-2ef4-a161-e372-e3fa992cfac0.png