General

  • Target
    CIV-2026-044-000531 – Paris NZ Ltd v Clayton – Supplementary Evidence.eml
  • Size 59KB
  • Sample260821-e1wnessgkd
  • SHA256 bf4f919ec80673e2fd1dfa768433838af0bb9a4b1c09e8000d6b22d633e7fc25
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • CIV-2026-044-000531 – Paris NZ Ltd v Clayton – Supplementary Evidence.eml
    .eml 59KB
  • email-html-2.txt
    .html 17KB
  • email-plain-1.txt
    4KB
  • image001.jpg
    .jpg 1KB
  • image002.png
    .png 20KB

CIV-2026-044-000531 – Paris NZ Ltd v Clayton – Supplementary Evidence.eml

  • SHA256 bf4f919ec80673e2fd1dfa768433838af0bb9a4b1c09e8000d6b22d633e7fc25
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Delivered-To

[email protected]

In-Reply-To

SYBP282MB2543880F8DAB64F472AAFD95A8DE2@SYBP282MB2543.AUSP282.PROD.OUTLOOK.COM

Return-Path

<[email protected]>

Date

Tue, 11 Aug 2026 05:36:32 +0000

Subject

=?Windows-1252?Q?RE:_CIV-2026-044-000531_=96_Paris_NZ_Ltd_v_Clayton_=96_S?= =?Windows-1252?Q?upplementary_Evidence?=

Content-Type

multipart/related; boundary="_005_2d857b5d149f4c12b65feb2e62c56287whiteheadgroupconz_"; type="multipart/alternative"

Received

by 2002:a54:3c85:0:b0:2db:31b4:8db0 with SMTP id v5csp181165ecp; Mon, 10 Aug 2026 22:36:39 -0700 (PDT)

from mx03a.onenet.co.nz (mx03a.onenet.co.nz. [103.241.88.43]) by mx.google.com with ESMTPS id a92af1059eb24-14120350042si1492501c88.5.2026.08.10.22.36.35 for <[email protected]> (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 10 Aug 2026 22:36:38 -0700 (PDT)

from ONENETEX46.services.onenet.co.nz (Not Verified[10.10.2.146]) by mx03a.onenet.co.nz with OneNet Message Protect (using TLS: TLSv1.2, ECDHE-RSA-AES256-GCM-SHA384) id <B6a7ab4e00001>; Tue, 11 Aug 2026 17:36:32 +1200

from ONENETEX43.services.onenet.co.nz (10.10.2.143) by ONENETEX46.services.onenet.co.nz (10.10.2.146) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.2562.45; Tue, 11 Aug 2026 17:36:32 +1200

from ONENETEX43.services.onenet.co.nz ([fe80::4cc6:4b60:1a94:ecfb]) by ONENETEX43.services.onenet.co.nz ([fe80::4cc6:4b60:1a94:ecfb%12]) with mapi id 15.02.2562.017; Tue, 11 Aug 2026 17:36:32 +1200

X-Received

by 2002:a17:90b:4d0c:b0:381:9028:5945 with SMTP id 98e67ed59e1d1-392ec57f3dbmr773400a91.14.1786426599564; Mon, 10 Aug 2026 22:36:39 -0700 (PDT)

Received-Spf

pass (google.com: domain of [email protected] designates 103.241.88.43 as permitted sender) client-ip=103.241.88.43;

Message-Id

<[email protected]>

Extracted URLs

  • file http://www.justice.govt.nz/