General

  • Target
    phish_alert_sp2_2.0.0.0.eml
  • Size 113KB
  • Sample260819-e21c1ada24
  • SHA256 4446be3157ea6b7a3a68a5c85a42e1d9c3f79b1fa30209dbfc95eb17541b9cd2
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • phish_alert_sp2_2.0.0.0.eml
    .eml 113KB
  • Ever Nimble Order ENAU-SO-1006382.pdf
    .pdf 58KB
  • email-html-1.txt
    .html 22KB

phish_alert_sp2_2.0.0.0.eml

  • SHA256 4446be3157ea6b7a3a68a5c85a42e1d9c3f79b1fa30209dbfc95eb17541b9cd2
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

[email protected]

Date

Wed, 19 Aug 2026 00:42:15 +0000

Subject

Order ENAU-SO-1006382 from Ever Nimble

Content-Type

multipart/mixed; boundary=mk3-91dda41a6db14955b287046f0cf73d38

Received

from SY4P282MB3972.AUSP282.PROD.OUTLOOK.COM (2603:10c6:10:198::13) by ME2P282MB6645.AUSP282.PROD.OUTLOOK.COM with HTTPS; Wed, 19 Aug 2026 00:44:17 +0000

from SY6PR01CA0010.ausprd01.prod.outlook.com (2603:10c6:10:e8::15) by SY4P282MB3972.AUSP282.PROD.OUTLOOK.COM (2603:10c6:10:198::13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.339.8; Wed, 19 Aug 2026 00:42:18 +0000

from SY3PEPF0000A727.ausprd01.prod.outlook.com (2603:10c6:10:e8:cafe::9f) by SY6PR01CA0010.outlook.office365.com (2603:10c6:10:e8::15) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.339.8 via Frontend Transport; Wed, 19 Aug 2026 00:42:18 +0000

from mta219-ab1.mtasv.net (50.31.205.219) by SY3PEPF0000A727.mail.protection.outlook.com (10.167.241.23) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.339.3 via Frontend Transport; Wed, 19 Aug 2026 00:42:17 +0000

from ip-172-26-13-110.us-east-2.compute.internal (172.26.13.110) by production-pmta-useast2.internal.postmarkapp.com (KumoMTA 10.97.242.143) with ESMTP id d2e36d759b6611f180b50295c12d1bd1 for <[email protected]>; Wed, 19 Aug 2026 00:42:15 +0000

Received-Spf

Pass (protection.outlook.com: domain of pm-bounces.evernimble.com designates 50.31.205.219 as permitted sender) receiver=protection.outlook.com; client-ip=50.31.205.219; helo=mta219-ab1.mtasv.net; pr=C

Message-Id

<[email protected]>