General

  • Target
    Phishing_6c964b56-ef1b-4a57-734a-08df0080a91e_ederdelarosa@getbuo.com_(Re_ CONVESACIONES DE TALENTO) 08_23_2026 18_48_24.eml
  • Size 112KB
  • Sample260824-jctalscd98
  • SHA256 0844f00f180528394a527985a5aed031768fa1c11771756d5f1b00a1dd74b05f
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • Phishing_6c964b56-ef1b-4a57-734a-08df0080a91e_ederdelarosa@getbuo.com_(Re_ CONVESACIONES DE TALENTO) 08_23_2026 18_48_24.eml
    .eml 112KB
  • attachment-2
    .eml 70KB
  • email-html-2.txt
    6KB
  • email-plain-1.txt
    2KB
  • image.png
    .png 31KB
  • email-plain-1.txt
    10KB

Phishing_6c964b56-ef1b-4a57-734a-08df0080a91e_ederdelarosa@getbuo.com_(Re_ CONVESACIONES DE TALENTO) 08_23_2026 18_48_24.eml

  • SHA256 0844f00f180528394a527985a5aed031768fa1c11771756d5f1b00a1dd74b05f
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

[email protected]

Date

Sun, 23 Aug 2026 18:48:24 +0000

Subject

Phishing:6c964b56-ef1b-4a57-734a-08df0080a91e|[email protected]|(Re: CONVESACIONES DE TALENTO) 08/23/2026 18:48:24

Content-Type

multipart/mixed; boundary="_002_JMR6c964b56ef1b4a57734a08df0080a91ePhish639231077046082_"

Received

from AS4PR03MB8508.eurprd03.prod.outlook.com (2603:10a6:20b:580::11) by DBAPR03MB6661.eurprd03.prod.outlook.com with HTTPS; Sun, 23 Aug 2026 18:52:23 +0000

from AS9PR06CA0296.eurprd06.prod.outlook.com (2603:10a6:20b:45a::16) by AS4PR03MB8508.eurprd03.prod.outlook.com (2603:10a6:20b:580::11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.339.12; Sun, 23 Aug 2026 18:51:48 +0000

from AMS1EPF00000046.eurprd04.prod.outlook.com (2603:10a6:20b:45a:cafe::a5) by AS9PR06CA0296.outlook.office365.com (2603:10a6:20b:45a::16) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.339.12 via Frontend Transport; Sun, 23 Aug 2026 18:51:48 +0000

from nat.eu.perception-point.io (99.80.189.20) by AMS1EPF00000046.mail.protection.outlook.com (10.167.16.43) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.360.3 via Frontend Transport; Sun, 23 Aug 2026 18:51:47 +0000

from GV1PR07CU001.outbound.protection.outlook.com (mail-gv1pr07cu00106.outbound.protection.outlook.com [40.93.214.102]) by inbound-smtp.eu-west-1.amazonaws.com with SMTP id d1n5iib06a94c7ikdl5nc0et9un354lfbmsii5o1 for [email protected]; Sun, 23 Aug 2026 18:51:44 +0000 (UTC)

from AS4P189CA0003.EURP189.PROD.OUTLOOK.COM (2603:10a6:20b:5d7::8) by AMBPR03MB11405.eurprd03.prod.outlook.com (2603:10a6:20b:765::15) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.339.12; Sun, 23 Aug 2026 18:48:28 +0000

from AMS1EPF00000044.eurprd04.prod.outlook.com (2603:10a6:20b:5d7:cafe::31) by AS4P189CA0003.outlook.office365.com (2603:10a6:20b:5d7::8) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.339.12 via Frontend Transport; Sun, 23 Aug 2026 18:48:28 +0000

from DB3PR0202CU003.outbound.protection.outlook.com (2a01:111:f403:c200::1) by AMS1EPF00000044.mail.protection.outlook.com (2603:10a6:20f:fff4:0:2:0:9) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.360.3 via Frontend Transport; Sun, 23 Aug 2026 18:48:27 +0000

from AM6PR03MB4935.eurprd03.prod.outlook.com (2603:10a6:20b:8c::29) by AS8PR03MB7334.eurprd03.prod.outlook.com (2603:10a6:20b:2e4::14) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.339.12; Sun, 23 Aug 2026 18:48:24 +0000

from AM6PR03MB4935.eurprd03.prod.outlook.com ([fe80::37f5:aee9:b957:e4fc]) by AM6PR03MB4935.eurprd03.prod.outlook.com ([fe80::37f5:aee9:b957:e4fc%5]) with mapi id 15.21.0339.012; Sun, 23 Aug 2026 18:48:24 +0000

Received-Spf

Fail (protection.outlook.com: domain of dominos.com.mx does not designate 99.80.189.20 as permitted sender) receiver=protection.outlook.com; client-ip=99.80.189.20; helo=nat.eu.perception-point.io;

pass (spfCheck: domain of dominos.com.mx designates 40.93.214.102 as permitted sender) client-ip=40.93.214.102; [email protected]; helo=GV1PR07CU001.outbound.protection.outlook.com;

Pass (protection.outlook.com: domain of dominos.com.mx designates 2a01:111:f403:c200::1 as permitted sender) receiver=protection.outlook.com; client-ip=2a01:111:f403:c200::1; helo=DB3PR0202CU003.outbound.protection.outlook.com; pr=C

Message-Id

<JMR.6c964b56-ef1b-4a57-734a-08df0080a91e.Phish.639231077046082844@microsoft.com>

Extracted URLs

  • file https://eur05.safelinks.protection.outlook.com/?url=