Resubmissions

20/08/2026, 03:39

260820-d7x96aygld8

20/08/2026, 03:29

260820-d2dcss11cv8

General

  • Target
    e898836c-6b60-ec5a-4b0d-cb3496b7fb1e.eml
  • Size 1.1MB
  • Sample260820-d2dcss11cv
  • SHA256 77e45b0dd66b0c0bc24fb624ea61fddd411d95f2876e70d71532384a812482e2
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • e898836c-6b60-ec5a-4b0d-cb3496b7fb1e.eml
    .eml 1.1MB
  • FM VN - LVCM2 - Certificate of Corporate Representative (Ordinary Shareholder) - KW draft 19.8.26(49213355.4).docx
    .docx 24KB
  • FM VN - LVCM2 - Directors' Resolutions (Company) - KW draft 19.8.26(49213311.4).docx
    .docx 44KB
  • FM VN - LVCM2 - Directors' Resolutions (Manager) - KW draft 19.8.26(49213363.4).docx
    .docx 30KB
  • FM VN - LVCM2 - Directors' Resolutions (Sponsor Co-Investor) - KW draft 19.8.26(49213366.4).docx
    .docx 31KB
  • FM VN - LVCM2 - Notice of Resolution (Adoption of New Constitution) - KW draft 19.8.26(49213373.4).docm
    .docm 34KB
  • FM VN - LVCM2 - Notice of Resolution (Authority to Issue Shares) - KW draft 19.8.26(49213374.4).docm
    .docm 38KB
  • FM VN - LVCM2 - Shareholders' Resolutions (Company) - KW draft 19.8.26(49213325.4).docx
    .docx 38KB
  • email-html-2.txt
    .html 514KB
  • email-plain-1.txt
    112KB
  • image001.png
    .png 68KB
  • image002.png
    .png 22KB

e898836c-6b60-ec5a-4b0d-cb3496b7fb1e.eml

  • SHA256 77e45b0dd66b0c0bc24fb624ea61fddd411d95f2876e70d71532384a812482e2
  • MD5 SHA1 SHA512 SSDEEP TLSH
Password
M@yIsangPun0NgKamatisNanabaliDahilSabigatng!bon

Email Headers

In-Reply-To

SG2PR06MB5213566A964F955055E6DC61DEA52@SG2PR06MB5213.apcprd06.prod.outlook.com

Return-Path

[email protected]

Date

Wed, 19 Aug 2026 15:59:46 +0000

Subject

FM Vietnam - LVCM2 - Launch Resolutions and Notices

Content-Type

multipart/mixed; boundary="_013_SG2PR06MB5213B01C7C4B4F216D8019DBDEA52SG2PR06MB5213apcp_"

Received

from TY4P301CA0102.JPNP301.PROD.OUTLOOK.COM (2603:1096:405:37b::12) by KL1PR0601MB5549.apcprd06.prod.outlook.com (2603:1096:820:c0::12) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.339.8; Wed, 19 Aug 2026 16:00:13 +0000

from TY2PEPF0000AB8A.apcprd03.prod.outlook.com (2603:1096:405:37b:cafe::ad) by TY4P301CA0102.outlook.office365.com (2603:1096:405:37b::12) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.339.8 via Frontend Transport; Wed, 19 Aug 2026 16:00:12 +0000

from au-smtp-delivery-124.mimecast.com (103.96.21.124) by TY2PEPF0000AB8A.mail.protection.outlook.com (10.167.253.8) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.339.3 via Frontend Transport; Wed, 19 Aug 2026 16:00:11 +0000

from TYDPR03CU002.outbound.protection.outlook.com (mail-japaneastazon11023141.outbound.protection.outlook.com [52.101.127.141]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.3, cipher=TLS_AES_256_GCM_SHA384) id au-mta-61-PDp--6GSNpWjVvpec0DloQ-1; Thu, 20 Aug 2026 01:59:54 +1000

from SG2PR06MB5213.apcprd06.prod.outlook.com (2603:1096:4:1d2::13) by JH0PR06MB6559.apcprd06.prod.outlook.com (2603:1096:990:2f::9) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.339.8; Wed, 19 Aug 2026 15:59:47 +0000

from SG2PR06MB5213.apcprd06.prod.outlook.com ([fe80::659e:d8b8:51a7:3e90]) by SG2PR06MB5213.apcprd06.prod.outlook.com ([fe80::659e:d8b8:51a7:3e90%5]) with mapi id 15.21.0339.007; Wed, 19 Aug 2026 15:59:47 +0000

Received-Spf

Pass (protection.outlook.com: domain of hk.kingandwood.com designates 103.96.21.124 as permitted sender) receiver=protection.outlook.com; client-ip=103.96.21.124; helo=au-smtp-delivery-124.mimecast.com; pr=C

Message-Id

<SG2PR06MB5213B01C7C4B4F216D8019DBDEA52@SG2PR06MB5213.apcprd06.prod.outlook.com>

Extracted URLs

  • file http://[email protected]

  • file http://[email protected]/

  • file http://[email protected]

  • file http://lo-goigroup.com

  • file http://lo-goigroup.com/

  • file http://www.kingandwood.com

  • file http://www.kingandwood.com/

  • file https://aka.ms/LearnAboutSenderIdentification

  • file https://aka.ms/o0ukef