phish_alert_sp2_2[.]0[.]0[.]0[.]eml

General

Target
phish_alert_sp2_2.0.0.0.eml
Size 32KB
Sample260819-halmbadf28
SHA256 b8b4d847a35bcb273615a9f69071a335b0bf49777cbc55235fe84d4fbb7c7c1b
MD5 d75955420e36d89689ec6afbadd53bca
SHA1 53e19a98c16e3f3e61acfab26c70015bde59aeb3
SHA512 a74965082df6b0a3336d1777960ab5fa6d68ae49569dc699e1fc9a51c0b13a813db8634d1db0611f86a24c013f240574f7895033a0394f5c68b5bcb2f49020e3
SSDEEP 384:jmXjwfg6UCY2G5NlHWIpuJQ2uRx2zQXvKRwRK5uI+JEKGCPYAZ7CcK0BD2DfljzR:K0YcG7ptpuJ7uRQzQf3EaZ73KjlXG4
TLSH
T193E28F299D531CA9D0D263D67812FF09D2912C9FD277A0F026AE76630B8E4EA074768D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

phish_alert_sp2_2.0.0.0.eml

.eml 32KB
email-html-2.txt

.html 6KB
email-plain-1.txt

2KB

phish_alert_sp2_2.0.0.0.eml

SHA256 b8b4d847a35bcb273615a9f69071a335b0bf49777cbc55235fe84d4fbb7c7c1b
MD5 d75955420e36d89689ec6afbadd53bca
SHA1 53e19a98c16e3f3e61acfab26c70015bde59aeb3
SHA512 a74965082df6b0a3336d1777960ab5fa6d68ae49569dc699e1fc9a51c0b13a813db8634d1db0611f86a24c013f240574f7895033a0394f5c68b5bcb2f49020e3
SSDEEP 384:jmXjwfg6UCY2G5NlHWIpuJQ2uRx2zQXvKRwRK5uI+JEKGCPYAZ7CcK0BD2DfljzR:K0YcG7ptpuJ7uRQzQf3EaZ73KjlXG4
TLSH
T193E28F299D531CA9D0D263D67812FF09D2912C9FD277A0F026AE76630B8E4EA074768D
MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

To

[email protected]

From

[email protected]

In-Reply-To

010801a017d8e037-d6ab58ac-e443-432e-8019-de2c091c4f5d-000000@ap-southeast-2.amazonses.com

Date

Wed, 19 Aug 2026 11:59:31 +0930

Subject

FW: Reece pay by link | Order for THE AG SHOP (3197068) at Plumbing Cannington | Amount: $92.10

Content-Type

multipart/related; boundary="----=_NextPart_000_0000_01DD2FF0.9C32E2E0"

Received

from SY5PR01CU010.outbound.protection.outlook.com (2a01:111:f403:c40d::4) by SY1PEPF000066C4.mail.protection.outlook.com (2603:10c6:18::136) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.339.3 via Frontend Transport; Wed, 19 Aug 2026 02:29:34 +0000

from SY1PEPF000066C4.ausprd01.prod.outlook.com (2603:10c6:10:b4:cafe::26) by SYYP282CA0012.outlook.office365.com (2603:10c6:10:b4::22) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.339.8 via Frontend Transport; Wed, 19 Aug 2026 02:29:34 +0000

from SY1P282MB6665.AUSP282.PROD.OUTLOOK.COM ([fe80::5168:ae95:6da2:c91c]) by SY1P282MB6665.AUSP282.PROD.OUTLOOK.COM ([fe80::5168:ae95:6da2:c91c%5]) with mapi id 15.21.0339.007; Wed, 19 Aug 2026 02:29:31 +0000

from SY1P282MB6665.AUSP282.PROD.OUTLOOK.COM (2603:10c6:10:36c::23) by SY4P282MB0906.AUSP282.PROD.OUTLOOK.COM (2603:10c6:10:b0::13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.339.8; Wed, 19 Aug 2026 02:29:31 +0000

from SYYP282CA0012.AUSP282.PROD.OUTLOOK.COM (2603:10c6:10:b4::22) by SY4P282MB1867.AUSP282.PROD.OUTLOOK.COM (2603:10c6:10:d3::12) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.339.8; Wed, 19 Aug 2026 02:29:35 +0000

from SY4P282MB1867.AUSP282.PROD.OUTLOOK.COM (2603:10c6:10:d3::12) by SY0P282MB5986.AUSP282.PROD.OUTLOOK.COM with HTTPS; Wed, 19 Aug 2026 02:30:24 +0000

Received-Spf

Pass (protection.outlook.com: domain of theagshop.com.au designates 2a01:111:f403:c40d::4 as permitted sender) receiver=protection.outlook.com; client-ip=2a01:111:f403:c40d::4; helo=SY5PR01CU010.outbound.protection.outlook.com; pr=C

X-Mailer

Microsoft Outlook 16.0

Message-Id

<SY1P282MB666550DC848044D5CAD522D89CA52@SY1P282MB6665.AUSP282.PROD.OUTLOOK.COM>

Extracted URLs

file https://au.adyen.link/PLA1BEE1D6709427B0239A5FD
file https://aus01.safelinks.protection.outlook.com/?url=
file https://www.reece.com.au/site-assets/terms/Reece-Saved-Card-Details-Payment-Terms-and-Conditions.pdf

Sharing