General

  • Target
    G9et_nvmh7T5DR6nP6xXKU9JS8B_U8km_2026-08-20T08_57_17.249Z.eml
  • Size 26KB
  • Sample260820-k2bbrstbmc
  • SHA256 a5f7604b5e3dfca4126d6b40bead90f6ec63b3d44d9876cb9abc105fcb0c0e85
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • G9et_nvmh7T5DR6nP6xXKU9JS8B_U8km_2026-08-20T08_57_17.249Z.eml
    .eml 26KB
  • email-html-2.txt
    .html 6KB
  • email-plain-1.txt
    1KB

G9et_nvmh7T5DR6nP6xXKU9JS8B_U8km_2026-08-20T08_57_17.249Z.eml

  • SHA256 a5f7604b5e3dfca4126d6b40bead90f6ec63b3d44d9876cb9abc105fcb0c0e85
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

[email protected]

Date

Wed, 19 Aug 2026 09:10:22 -0700

Subject

Ken Sullivan

Content-Type

multipart/alternative; boundary="000000000000604c16065968a447"

Received

from AMBPR02MB12253.eurprd02.prod.outlook.com (2603:10a6:20b:75e::22) by GVXPR02MB11614.eurprd02.prod.outlook.com with HTTPS; Wed, 19 Aug 2026 16:10:34 +0000

from AS4P250CA0015.EURP250.PROD.OUTLOOK.COM (2603:10a6:20b:5df::14) by AMBPR02MB12253.eurprd02.prod.outlook.com (2603:10a6:20b:75e::22) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.339.8; Wed, 19 Aug 2026 16:10:32 +0000

from DB3PEPF0000885E.eurprd02.prod.outlook.com (2603:10a6:20b:5df:cafe::1a) by AS4P250CA0015.outlook.office365.com (2603:10a6:20b:5df::14) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.339.8 via Frontend Transport; Wed, 19 Aug 2026 16:10:32 +0000

from mx07-00009201.pphosted.com (185.132.180.224) by DB3PEPF0000885E.mail.protection.outlook.com (10.167.242.9) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.339.3 via Frontend Transport; Wed, 19 Aug 2026 16:10:31 +0000

from pps.filterd (m0447335.ppops.net [127.0.0.1]) by mx08-00009201.pphosted.com (8.18.1.11/8.18.1.11) with ESMTP id 67JEePIs4047991 for <[email protected]>; Wed, 19 Aug 2026 16:10:31 GMT

from mail-pg1-f177.google.com (mail-pg1-f177.google.com [209.85.215.177]) by mx08-00009201.pphosted.com (PPS) with ESMTPS id 4g5bmst95e-1 (version=TLSv1.3 cipher=TLS_AES_128_GCM_SHA256 bits=128 verify=NOT) for <[email protected]>; Wed, 19 Aug 2026 16:10:31 +0000 (GMT)

by mail-pg1-f177.google.com with SMTP id 41be03b00d2f7-cbb8b54fcf8so1008355a12.0 for <[email protected]>; Wed, 19 Aug 2026 09:10:31 -0700 (PDT)

X-Received

by 2002:a05:6300:86:b0:3c3:704d:57c4 with SMTP id adf61e73a8af0-3cd0121215amr12185175637.12.1787155829507; Wed, 19 Aug 2026 09:10:29 -0700 (PDT)

Received-Spf

Pass (protection.outlook.com: domain of gmail.com designates 209.85.215.177 as permitted sender) receiver=protection.outlook.com; client-ip=209.85.215.177; helo=mail-pg1-f177.google.com; pr=C

Message-Id

<CAGKWq+[email protected]>