Overview

overview

5

Static

static

5

20260825162816948.pdf

windows10-2004-x64

3

20260825162816948.pdf

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    phish_alert_sp2_2.0.0.0 - 2026-08-25T164823.857.eml
  • Size 53KB
  • Sample260825-1qa5mazblb
  • SHA256 690844d0a06b3a90fe367770d5073edc74c8549b971cfd85c56e33f0c8a87e6b
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
pdf

Malware Config

Signatures

  • Malformed data in PDF

    A PDF can contain malformed data to evade detection

    pdf

File Explorer

  • phish_alert_sp2_2.0.0.0 - 2026-08-25T164823.857.eml
    .eml 53KB
  • 20260825162816948.pdf
    .pdf 35KB
  • email-html-1.txt
    .html 946B

phish_alert_sp2_2.0.0.0 - 2026-08-25T164823.857.eml

  • SHA256 690844d0a06b3a90fe367770d5073edc74c8549b971cfd85c56e33f0c8a87e6b
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

[email protected]

Date

Tue, 25 Aug 2026 20:16:23 +0000

Subject

=?UTF-8?B?V2lsbGlhbSBEaVBpbGxvLSAgaXRlbWl6ZWQgIHJlY2VpcHQgdGhh?= =?UTF-8?B?dCB5b3UgcmVxdWVzdGVk?=

Content-Type

multipart/mixed; boundary="----sinikael-?=_1-17876941309600.7553807755510454"

Received

from DS5PR09MB12713.namprd09.prod.outlook.com (2603:10b6:8:486::18) by DS0PR09MB11466.namprd09.prod.outlook.com with HTTPS; Tue, 25 Aug 2026 20:16:27 +0000

from MW4PR09MB9170.namprd09.prod.outlook.com (2603:10b6:303:1f7::5) by DS5PR09MB12713.namprd09.prod.outlook.com (2603:10b6:8:486::18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.360.7; Tue, 25 Aug 2026 20:16:24 +0000

from MW4PR09MB9170.namprd09.prod.outlook.com ([fe80::92a4:18d8:f34c:72c0]) by MW4PR09MB9170.namprd09.prod.outlook.com ([fe80::92a4:18d8:f34c:72c0%3]) with mapi id 15.21.0360.006; Tue, 25 Aug 2026 20:16:24 +0000

Message-Id

<MW4PR09MB917086A639C1E1E440A342DB83AF2@MW4PR09MB9170.namprd09.prod.outlook.com>