suspected_phishing_email (18)[.]eml

Resubmissions

19/08/2026, 19:40

260819-ydqy7sgr3w

19/08/2026, 19:29

260819-x7anmsgp9w1

Sharing

Copy URL Twitter E-mail

General

Target
suspected_phishing_email (18).eml
Size 48KB
Sample260819-x7anmsgp9w
SHA256 cdb582b4dd8c5bd171b871149311e456cb15d7fa5d07c25a35dc9a47f9c21aed
MD5 dd124b7d37fb4b66bd36452862f0ab4d
SHA1 16a01002c76fe5b0f95781de64e3f5f30c6bd352
SHA512 e38f20db740dfe93763694daefaab547ccfbd6872a23e8641e22a1feb99721bd90cb38d1737debb88e08838317f45b31b89eb83a3abc779d2cd1c461c8fb5c2d
SSDEEP 768:56jSf3AzKa2kWss/ILGTxCSw0HdQWZDvtkwvvrwvG:56jSfwz6kGfCgJvN
TLSH
T16B23B752F2C0291D54DB01D8D1233FBC6BF9008A87B61EB4F81A3BBE5795DF60A21679
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

suspected_phishing_email (18).eml

.eml 48KB
email-html-1.txt

.html 39KB

suspected_phishing_email (18).eml

SHA256 cdb582b4dd8c5bd171b871149311e456cb15d7fa5d07c25a35dc9a47f9c21aed
MD5 dd124b7d37fb4b66bd36452862f0ab4d
SHA1 16a01002c76fe5b0f95781de64e3f5f30c6bd352
SHA512 e38f20db740dfe93763694daefaab547ccfbd6872a23e8641e22a1feb99721bd90cb38d1737debb88e08838317f45b31b89eb83a3abc779d2cd1c461c8fb5c2d
SSDEEP 768:56jSf3AzKa2kWss/ILGTxCSw0HdQWZDvtkwvvrwvG:56jSfwz6kGfCgJvN
TLSH
T16B23B752F2C0291D54DB01D8D1233FBC6BF9008A87B61EB4F81A3BBE5795DF60A21679
MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

[email protected]

From

[email protected]

Return-Path

010001a01b706e36-b0de193f-21c6-4ed6-9ab3-9c6709b91032-000000@amazonses.com

Date

Wed, 19 Aug 2026 19:13:10 GMT

Wed, 19 Aug 2026 19:12:28 +0000

Subject

Final Review Required for Swktech Signed Agreement

Content-Type

text/html; charset=UTF-8

Received

from MN2PR04MB6656.namprd04.prod.outlook.com (2603:10b6:208:1ed::9) by LV0PR04MB9860.namprd04.prod.outlook.com with HTTPS; Wed, 19 Aug 2026 19:13:10 +0000

from DS1P220CA0023.NAMP220.PROD.OUTLOOK.COM (2603:10b6:8:44c::16) by MN2PR04MB6656.namprd04.prod.outlook.com (2603:10b6:208:1ed::9) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.339.8; Wed, 19 Aug 2026 19:12:29 +0000

from SN1PEPF0002BA4D.namprd03.prod.outlook.com (2603:10b6:8:44c:cafe::7b) by DS1P220CA0023.outlook.office365.com (2603:10b6:8:44c::16) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.339.8 via Frontend Transport; Wed, 19 Aug 2026 19:12:29 +0000

from a8-60.smtp-out.amazonses.com (54.240.8.60) by SN1PEPF0002BA4D.mail.protection.outlook.com (10.167.242.70) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.339.3 via Frontend Transport; Wed, 19 Aug 2026 19:12:28 +0000

Received-Spf

Pass (protection.outlook.com: domain of amazonses.com designates 54.240.8.60 as permitted sender) receiver=protection.outlook.com; client-ip=54.240.8.60; helo=a8-60.smtp-out.amazonses.com; pr=C

Message-Id

<010001a01b706e36-b0de193f-21c6-4ed6-9ab3-9c6709b91032-000000@email.amazonses.com>

Extracted URLs

file https://aka.ms/LearnAboutSenderIdentification
file https://portertwp.org/g
file https://r.mail2.papayaglobal.com/tr/cl/KsCtIvyqczv_QwaRvx-QK34Mc9vcm7BBtxMUpkdaHb1PTORHDeu830y79yXCatf0JC9nfNM2-GS5oYIXIOOnne9qf7Q6Gftq-vdn95ku8mw58ZiTPBNma4St8XgeeZNIQRmFIGE7dsYjoxqFFwMen8aQPLfaFvDmcbAiMHYU1d_K8sx6ArTBzAIEXqCVRGeo6Z88ptW6_A2U0ZQoU_0NYO4AUXHDWGEDWf8wEixzx9Q5Nky2IAnDIjVMvd4hTrdTsCqNCHqpU-H1kDAnaqCnuwVw5vULIAnWU7L3zq9q1ijeHe5d2QLD_AX6CxMq
file https://r.mail2.papayaglobal.com/tr/cl/WPudkFTwUf6BBFmLOrSntgIv3zpWKxeDZUF5DaLfK52k4jBBK15dLSqn3NBumzByHaIfYJV1SVG8TbA6iuv6SmfR4vQjgFY6gAyC7eOdeemAgIcDNFw0YPaqs5CY9hjqqEZhbgvCcoTy7lsPqAv6mdDnWHIqgANSxFZAmDL03shSBqNP7x7uhnekJW1HsShbUf7mt1ZeFpg4TdVgZgIoCs-hYXd8nfcCbv_ubm4Bv9k-wR4vpqdAufQbRrccoyQQCwkvUKxjtXlxTDooE9Km5uQW9w
file https://r.mail2.papayaglobal.com/tr/cl/fTU6fs02bTQN3XQ5optPLMSj4Cu_ihVlAKLisCG8KuMTkQWs3OSMcBcFj7zgwKJUASJAWPkd5u3bSHZ_CTBliIVWcKcaQQl_66E82HMXzD1o48pFwzLdv5-G5N9ghLrmfYBFF-kzpoXjmY2-BUU0yQfUPmcmwVGk9OEA-Uqs11jFjYtaXZio6ePM5KDfXsb6naFCg4QsL-X2kHtWEkVQ4wE2T4Rk5DcYsJiiraCoNTGTN9tJIPSyOBtrwJMbz9DQ30AMO8Q_oqwdIoaEnj64ffGeaxN53df3E1IE9gpMo0HOJ11MwJYUuSG6QFVXYoN9KtevXhHCuKvBuJz_
file https://r.mail2.papayaglobal.com/tr/cl/l1yAOoPvSxaybNDslysCCXU6HKkexFSdWA03ds3AzNt-zD9PFYNuORe1RZm0W1Hnp93dbG7MBi4msx7LwJkMPgIrkewCLp4TcDtR7f1_rKYIxTcH7s49gBUpZZWCQuLStHepGo47GKM5TUAuIkavBKA-4MV5gT_7AynOeaszPkC63zCzUL_geJxMlZG_v4UJT2uTRorVJj6ZNtzzEWO9NxtonWbmrirp-PcBwjTB_O95dnasg4Zd6LXEsN_kJ9EPNfc-i2XRJjX16dq9j1Idof-9609A-z7ssg1VBdtpCWSjbypH7__CS0CHEN7Ws_a94lFpVpMR-SRazWOcAQ
file https://r.mail2.papayaglobal.com/tr/cl/o0OHe2I64mIPNFJEKHumDOLxJG45fZK80dgAGoqONDuSGCioUVr3NTiHP1HdWUfKl2mLVUTycY5ClsOFv462-1ldtcxCvUW4959cE14cfutwWkJYaHtpJRwn0bJiIxuthXs9r9TBWWv7xPpHsD5oLkFZlCXLzsbNdaKw5mAqi4LUS7Xi8oBE9KhECSd8hourVQARIm0tB2xhSaYfsuIM7Blq-f-eqILHRsZuhrq4Tbnd9YsjaIPuJC-7gFg79RSbURq-yZCKNEVEaW8kiNjKmSxO9R36BvWxZ81dHLkb
file https://r.mail2.papayaglobal.com/tr/cl/t-H32klsjN9e-Lza9BmPM9rlU49WuA8CDgg2CMSLdHSDsBGXRsozwkcEPOjbY1oKhjBFrPWWx8FwIclSL7TqrOtTcuLA38BBTvTlyRwn2al8TcyjYuF8DFsk8b1WsgzgHAuR5pRhxaE88xC5glruQa8D-K6ACCBp2kae-ZtQt1OkgWR5ZCcjcM-ucofP-A6XH1OdsRniB-4Rp7i7AWRv7qX_hqDWqR8ttkd94hrto-ojGJDXlKMN5t697zqL1pm7k61PXjJXX8cyratXtvrB_jDGKU9hqrDw1xafjQw