Overview

overview

5

Static

static

5

RECIBO DE ...A..svg

windows10-2004-x64

3

RECIBO DE ...A..svg

windows11-ltsc_2024-x64

3

Resubmissions

14/08/2026, 15:34

260814-szzwcaxtay5

14/08/2026, 15:28

260814-swqhhawflh5

Sharing

Copy URL Twitter E-mail

General

  • Target
    phish_alert_sp2_2.0.0.0.eml
  • Size 164KB
  • Sample260814-swqhhawflh
  • SHA256 edad5954a3683c0c2c4c0416a6b4752736d015b5b1790f6497cefb3b7c72034c
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
svgjavascript

Malware Config

Signatures

  • Suspicious SVG script tag 1 IoCs
    svgjavascript
  • SVG contains script element(s) 1 IoCs
    svgjavascript

File Explorer

  • phish_alert_sp2_2.0.0.0.eml
    .eml 164KB
  • RECIBO DE COBRE FEIBO Servicios Industriales C.A..svg
    .svg .js .xml 103KB
  • email-html-1.txt
    .html 10KB

phish_alert_sp2_2.0.0.0.eml

  • SHA256 edad5954a3683c0c2c4c0416a6b4752736d015b5b1790f6497cefb3b7c72034c
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

[email protected]

Date

Fri, 14 Aug 2026 16:28:30 +0200

Subject

=?UTF-8?B?UkVDSUJPIERFIENPQlJFIEZFSUJPIFNlcnZpY2lvcyBJbmR1c3Ry?= =?UTF-8?B?aWFsZXMgQy5BLg==?=

Content-Type

multipart/mixed; boundary="----sinikael-?=_1-17867181327830.06723907551389785"

Received

from DM6PR16MB3799.namprd16.prod.outlook.com (2603:10b6:5:2be::7) by CYYPR16MB5506.namprd16.prod.outlook.com with HTTPS; Fri, 14 Aug 2026 14:30:50 +0000

from CH0PR03CA0053.namprd03.prod.outlook.com (2603:10b6:610:b3::28) by DM6PR16MB3799.namprd16.prod.outlook.com (2603:10b6:5:2be::7) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.315.16; Fri, 14 Aug 2026 14:28:45 +0000

from CH1PEPF0000A346.namprd04.prod.outlook.com (2603:10b6:610:b3:cafe::9e) by CH0PR03CA0053.outlook.office365.com (2603:10b6:610:b3::28) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.315.16 via Frontend Transport; Fri, 14 Aug 2026 14:28:45 +0000

from mail-ua1-f41.google.com (209.85.222.41) by CH1PEPF0000A346.mail.protection.outlook.com (10.167.244.11) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.339.3 via Frontend Transport; Fri, 14 Aug 2026 14:28:45 +0000

by mail-ua1-f41.google.com with SMTP id a1e0cc1a2514c-966eabad303so199152241.1 for <[email protected]>; Fri, 14 Aug 2026 07:28:45 -0700 (PDT)

X-Received

by 2002:a05:6122:179b:b0:56f:6cc0:681e with SMTP id 71dfb90a1353d-5c591c89f9amr989286e0c.1.1786717724291; Fri, 14 Aug 2026 07:28:44 -0700 (PDT)

Received-Spf

Pass (protection.outlook.com: domain of gmail.com designates 209.85.222.41 as permitted sender) receiver=protection.outlook.com; client-ip=209.85.222.41; helo=mail-ua1-f41.google.com; pr=C

Message-Id

<CA+UrZvvXqUK1_nBT-fK6wsODP+[email protected]>

Extracted URLs

  • file https://aka.ms/LearnAboutSenderIdentification