Overview

overview

3

Static

static

1

phish_aler...1).eml

windows10-2004-x64

1

phish_aler...1).eml

windows11-ltsc_2024-x64

1

email-html-1.html

windows10-2004-x64

3

email-html-1.html

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    phish_alert_sp2_2.0.0.0 (1).eml
  • Size 255KB
  • Sample260825-r4vazstemc
  • SHA256 e36170dceae3e97bbc3d094440705c68e9aa1f4792667f48c7b175db5bed22e6
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • phish_alert_sp2_2.0.0.0 (1).eml
    .eml 255KB
  • email-html-1.txt
    .html 236KB

phish_alert_sp2_2.0.0.0 (1).eml

  • SHA256 e36170dceae3e97bbc3d094440705c68e9aa1f4792667f48c7b175db5bed22e6
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

[email protected]

Date

Tue, 25 Aug 2026 07:09:34 -0600

Subject

=?UTF-8?B?W0VYVEVSTkFMXSBBbnN3ZXJpbmcgUXVlc3Rpb25zIGFuZCBNeXRo?= =?UTF-8?B?cyBBYm91dCBQYiBCYXNlZCBQYWludCBUZXN0aW5n?=

Content-Type

multipart/mixed; boundary="----sinikael-?=_1-17876648948320.7945934060253215"

Received

from IA6PR16MB6911.namprd16.prod.outlook.com (2603:10b6:208:5df::23) by MN6PR16MB5283.namprd16.prod.outlook.com with HTTPS; Tue, 25 Aug 2026 13:12:54 +0000

from CH3P220CA0020.NAMP220.PROD.OUTLOOK.COM (2603:10b6:610:1e8::9) by IA6PR16MB6911.namprd16.prod.outlook.com (2603:10b6:208:5df::23) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.339.12; Tue, 25 Aug 2026 13:09:36 +0000

from BN2PEPF0000A895.namprd04.prod.outlook.com (2603:10b6:610:1e8:cafe::1b) by CH3P220CA0020.outlook.office365.com (2603:10b6:610:1e8::9) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.360.6 via Frontend Transport; Tue, 25 Aug 2026 13:09:36 +0000

from gc69.mta.exacttarget.com (13.111.92.69) by BN2PEPF0000A895.mail.protection.outlook.com (10.167.248.187) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.360.3 via Frontend Transport; Tue, 25 Aug 2026 13:09:35 +0000

by gc69.mta.exacttarget.com id hhma0u39mjc1 for <[email protected]>; Tue, 25 Aug 2026 13:09:34 +0000 (envelope-from <[email protected]>)

Received-Spf

Pass (protection.outlook.com: domain of bounce.s10.mc.pd25.com designates 13.111.92.69 as permitted sender) receiver=protection.outlook.com; client-ip=13.111.92.69; helo=gc69.mta.exacttarget.com; pr=C

Message-Id

<[email protected]>

Extracted URLs

  • file https://aka.ms/LearnAboutSenderIdentification

  • file https://go.vikendetection.com/e/698963/product-pb200-/2bytws/1974525365/h/xq5-2GZGWJP9V368jbcDIle078Mr3a_7ZAicICFP9N4

  • file https://go.vikendetection.com/emailPreference/epc/698963/mIRgsZpppPbb-Ur6EhaISnXQnsBfPGLAdDxyhOj2h8Y/03d049c063bffd3e298db8ff9fe57a8008bf85405f3102c9e5355b2193ba62d1/1974525365

  • file https://go.vikendetection.com/unsubscribe/u/698963/03d049c063bffd3e298db8ff9fe57a8008bf85405f3102c9e5355b2193ba62d1/1974525365

  • file https://go.vikendetection.com/webmail/698963/1974525365/03d049c063bffd3e298db8ff9fe57a8008bf85405f3102c9e5355b2193ba62d1