112793[.]zip | Triage™

General

Target
112793.zip
Size 338KB
Sample260820-k6hlmscd72
SHA256 2b9b3183b87941205d22f48ed26a726dfaf49eccff67234b8c158c0e66135fae
MD5 1395361e8238e429cb4f21958364f26a
SHA1 1ebf4f1ebc8b8730cb94d7c768946b52b4c810ca
SHA512 8cb88e77674bfcaa8ec5e160d260767cf03910ed7b2655c139cc446808ca322503227bd906f0b41ca42a8ad705b4620e7ba44ebb5a74ecdb3a05eadd60754ce4
SSDEEP 6144:j+RXAC2ownTp2FWsTPLmnTiRITEVkWYPX8dd/Jtk8aeuHwQkBCah/kikgvKE6v4E:sXACe1OWUqEfTYPedBvLuQQUeil9E
TLSH
T1F77423F17F7201C56C8B0ABD9F2CC576D58301A6F19AF3E0E98C52082E54F9F629B616
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

112793.zip

.zip 338KB
Message.eml

.eml 541KB
10th Annual Electrification & Decarbonization for NRMM 2026.pdf

.pdf 378KB
email-html-1.txt

.html 13KB

112793.zip

SHA256 2b9b3183b87941205d22f48ed26a726dfaf49eccff67234b8c158c0e66135fae
MD5 1395361e8238e429cb4f21958364f26a
SHA1 1ebf4f1ebc8b8730cb94d7c768946b52b4c810ca
SHA512 8cb88e77674bfcaa8ec5e160d260767cf03910ed7b2655c139cc446808ca322503227bd906f0b41ca42a8ad705b4620e7ba44ebb5a74ecdb3a05eadd60754ce4
SSDEEP 6144:j+RXAC2ownTp2FWsTPLmnTiRITEVkWYPX8dd/Jtk8aeuHwQkBCah/kikgvKE6v4E:sXACe1OWUqEfTYPedBvLuQQUeil9E
TLSH
T1F77423F17F7201C56C8B0ABD9F2CC576D58301A6F19AF3E0E98C52082E54F9F629B616
MD5 SHA1 SHA512 SSDEEP TLSH

Password

1234

Message.eml

SHA256 6158a9fa5da6846f0ca5fd44e13b5c6d7ba93f21b90b220cff3ac3f292dbae93
MD5 1ee017aa964e064c5ebd03e1b3cba974
SHA1 8f5dab32b6c058cc74628a6b48de135800ba9246
SHA512 867e663657f51e737295879b7e016a62fbdba0bcf6338f9fcba5da66ff0d823cc1f32838db5801b9a4911310fc5497b2aa01efe6a2c09860c2003a86aa224edc
SSDEEP 12288:Cm0GKvgDv9M854XIZt1kGqcJwkq0/kmNz3WriO:NLvict18d7+zE
TLSH
T1C1C4D05BE85018227394125E8F5F2F6A38756C7E1EA987B3723D979851F8CE011E0CDE
MD5 SHA1 SHA512 SSDEEP TLSH

Password

1234

Email Headers

To

From

Reply-To

Return-Path

Date

13 Aug 2026 08:51:58 +0200

Subject

Decarbonization & Electrification of Non-Road Mobile Machinery Forum

Content-Type

multipart/mixed; boundary="----=_NextPart_000_0012_6AE7ABFE.ED83098B"

Received

from DU2PR04CA0299.eurprd04.prod.outlook.com (2603:10a6:10:28c::34) by AS8PR03MB6743.eurprd03.prod.outlook.com (2603:10a6:20b:29e::13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.315.13; Thu, 13 Aug 2026 08:08:38 +0000

from DU2PEPF00028D02.eurprd03.prod.outlook.com (2603:10a6:10:28c:cafe::1f) by DU2PR04CA0299.outlook.office365.com (2603:10a6:10:28c::34) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.315.14 via Frontend Transport; Thu, 13 Aug 2026 08:08:38 +0000

from srv4.connectamistat.com (5.196.171.83) by DU2PEPF00028D02.mail.protection.outlook.com (10.167.242.186) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.315.6 via Frontend Transport; Thu, 13 Aug 2026 08:08:38 +0000

Received-Spf

Pass (protection.outlook.com: domain of amstevents.com designates 5.196.171.83 as permitted sender) receiver=protection.outlook.com; client-ip=5.196.171.83; helo=srv4.connectamistat.com; pr=C

Message-Id

<[email protected]>

Extracted URLs

file https://aka.ms/LearnAboutSenderIdentification

Sharing

General

Malware Config

Signatures

File Explorer

112793.zip

Message.eml

Email Headers

Extracted URLs

10th Annual Electrification & Decarbonization for NRMM 2026.pdf

email-html-1.txt