General

  • Target
    6587f279-d48d-e4d7-a488-ec1decc39493.eml
  • Size 1.1MB
  • Sample260820-a7tp7azvay
  • SHA256 3206afd066101aeb413f6c87298a52a680db4d8dfc5d6a1a75ff7f7d819adfb3
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • 6587f279-d48d-e4d7-a488-ec1decc39493.eml
    .eml 1.1MB
  • FM VN - LVCM2 - Certificate of Corporate Representative (Ordinary Shareholder) - KW draft 19.8.26(49213355.4).docx
    .docx 24KB
  • FM VN - LVCM2 - Directors' Resolutions (Company) - KW draft 19.8.26(49213311.4).docx
    .docx 44KB
  • FM VN - LVCM2 - Directors' Resolutions (Manager) - KW draft 19.8.26(49213363.4).docx
    .docx 30KB
  • FM VN - LVCM2 - Directors' Resolutions (Sponsor Co-Investor) - KW draft 19.8.26(49213366.4).docx
    .docx 31KB
  • FM VN - LVCM2 - Notice of Resolution (Adoption of New Constitution) - KW draft 19.8.26(49213373.4).docm
    .docm 34KB
  • FM VN - LVCM2 - Notice of Resolution (Authority to Issue Shares) - KW draft 19.8.26(49213374.4).docm
    .docm 38KB
  • FM VN - LVCM2 - Shareholders' Resolutions (Company) - KW draft 19.8.26(49213325.4).docx
    .docx 38KB
  • email-html-2.txt
    .html 514KB
  • email-plain-1.txt
    112KB
  • image001.png
    .png 68KB
  • image002.png
    .png 22KB

6587f279-d48d-e4d7-a488-ec1decc39493.eml

  • SHA256 3206afd066101aeb413f6c87298a52a680db4d8dfc5d6a1a75ff7f7d819adfb3
  • MD5 SHA1 SHA512 SSDEEP TLSH
Password
infected

Email Headers

In-Reply-To

SG2PR06MB5213566A964F955055E6DC61DEA52@SG2PR06MB5213.apcprd06.prod.outlook.com

Return-Path

[email protected]

Date

Wed, 19 Aug 2026 15:59:46 +0000

Subject

FM Vietnam - LVCM2 - Launch Resolutions and Notices

Content-Type

multipart/mixed; boundary="_013_SG2PR06MB5213B01C7C4B4F216D8019DBDEA52SG2PR06MB5213apcp_"

Received

from TYCP286CA0091.JPNP286.PROD.OUTLOOK.COM (2603:1096:400:2b4::13) by TYQPR06MB8263.apcprd06.prod.outlook.com (2603:1096:405:373::16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.339.8; Wed, 19 Aug 2026 16:00:18 +0000

from TY2PEPF0000AB86.apcprd03.prod.outlook.com (2603:1096:400:2b4:cafe::35) by TYCP286CA0091.outlook.office365.com (2603:1096:400:2b4::13) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.339.8 via Frontend Transport; Wed, 19 Aug 2026 16:00:18 +0000

from au-smtp-delivery-124.mimecast.com (103.96.21.124) by TY2PEPF0000AB86.mail.protection.outlook.com (10.167.253.10) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.339.3 via Frontend Transport; Wed, 19 Aug 2026 16:00:18 +0000

from TYDPR03CU002.outbound.protection.outlook.com (mail-japaneastazon11023141.outbound.protection.outlook.com [52.101.127.141]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.3, cipher=TLS_AES_256_GCM_SHA384) id au-mta-61-PDp--6GSNpWjVvpec0DloQ-1; Thu, 20 Aug 2026 01:59:54 +1000

from SG2PR06MB5213.apcprd06.prod.outlook.com (2603:1096:4:1d2::13) by JH0PR06MB6559.apcprd06.prod.outlook.com (2603:1096:990:2f::9) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.339.8; Wed, 19 Aug 2026 15:59:47 +0000

from SG2PR06MB5213.apcprd06.prod.outlook.com ([fe80::659e:d8b8:51a7:3e90]) by SG2PR06MB5213.apcprd06.prod.outlook.com ([fe80::659e:d8b8:51a7:3e90%5]) with mapi id 15.21.0339.007; Wed, 19 Aug 2026 15:59:47 +0000

Received-Spf

Pass (protection.outlook.com: domain of hk.kingandwood.com designates 103.96.21.124 as permitted sender) receiver=protection.outlook.com; client-ip=103.96.21.124; helo=au-smtp-delivery-124.mimecast.com; pr=C

Message-Id

<SG2PR06MB5213B01C7C4B4F216D8019DBDEA52@SG2PR06MB5213.apcprd06.prod.outlook.com>

Extracted URLs

  • file http://[email protected]

  • file http://[email protected]/

  • file http://[email protected]

  • file http://lo-goigroup.com

  • file http://lo-goigroup.com/

  • file http://www.kingandwood.com

  • file http://www.kingandwood.com/

  • file https://aka.ms/LearnAboutSenderIdentification

  • file https://aka.ms/o0ukef