Resubmissions

25/08/2026, 23:00

260825-2y4ycabb473

25/08/2026, 22:53

260825-2t28ysfj713

General

  • Target
    c0c3a8c3-dfb6-21ed-da94-058adcbfa238.eml
  • Size 142KB
  • Sample260825-2y4ycabb47
  • SHA256 5e810163f184b450e36996a1a653ca63d28199836307ea58dcbf22a48d714757
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • c0c3a8c3-dfb6-21ed-da94-058adcbfa238.eml
    .eml 142KB
  • PC-2026-0824.pdf
    .pdf 78KB
  • email-html-2.txt
    .html 22KB
  • email-plain-1.txt
    1KB

c0c3a8c3-dfb6-21ed-da94-058adcbfa238.eml

  • SHA256 5e810163f184b450e36996a1a653ca63d28199836307ea58dcbf22a48d714757
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

[email protected]

Date

Tue, 25 Aug 2026 19:02:49 +0000

Subject

Bill PC-2026-0824

Content-Type

multipart/mixed; boundary="--_NmP-f6e2e52ba3262a0f-Part_1"

Received

from KUXPR04MB9774.apcprd04.prod.outlook.com (2603:1096:d10:66::5) by KUZPR04MB9270.apcprd04.prod.outlook.com with HTTPS; Tue, 25 Aug 2026 19:03:39 +0000

from SI1PR02CA0045.apcprd02.prod.outlook.com (2603:1096:4:1f6::16) by KUXPR04MB9774.apcprd04.prod.outlook.com (2603:1096:d10:66::5) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.360.8; Tue, 25 Aug 2026 19:03:04 +0000

from OSA0EPF000000CC.apcprd02.prod.outlook.com (2603:1096:4:1f6:cafe::2c) by SI1PR02CA0045.outlook.office365.com (2603:1096:4:1f6::16) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.360.8 via Frontend Transport; Tue, 25 Aug 2026 19:03:04 +0000

from mail.asces.ru (188.235.2.224) by OSA0EPF000000CC.mail.protection.outlook.com (10.167.240.58) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.360.3 via Frontend Transport; Tue, 25 Aug 2026 19:03:02 +0000

from localhost (localhost [127.0.0.1]) by mail.asces.ru (Postfix) with ESMTP id 415BD5253CC for <[email protected]>; Tue, 25 Aug 2026 22:02:56 +0300 (MSK)

from mail.asces.ru ([127.0.0.1]) by localhost (mail.asces.ru [127.0.0.1]) (amavisd-new, port 10032) with ESMTP id oG05Zysh0Hzd for <[email protected]>; Tue, 25 Aug 2026 22:02:51 +0300 (MSK)

from localhost (localhost [127.0.0.1]) by mail.asces.ru (Postfix) with ESMTP id D4AFB5253DE for <[email protected]>; Tue, 25 Aug 2026 22:02:51 +0300 (MSK)

from mail.asces.ru ([127.0.0.1]) by localhost (mail.asces.ru [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id OTyr_liNxPIJ for <[email protected]>; Tue, 25 Aug 2026 22:02:51 +0300 (MSK)

from [127.0.0.1] (unknown [135.148.234.114]) by mail.asces.ru (Postfix) with ESMTPSA id C396B5253CC for <[email protected]>; Tue, 25 Aug 2026 22:02:50 +0300 (MSK)

Received-Spf

Pass (protection.outlook.com: domain of asces.ru designates 188.235.2.224 as permitted sender) receiver=protection.outlook.com; client-ip=188.235.2.224; helo=mail.asces.ru; pr=C

Message-Id

<[email protected]>

Extracted URLs

  • file https://aka.ms/LearnAboutSenderIdentification