be9f48ec-d77b-6201-2dd9-6c5824fde13a[.]eml

General

Target
be9f48ec-d77b-6201-2dd9-6c5824fde13a.eml
Size 78KB
Sample260826-b69wfsbd55
SHA256 6b1113fe75ed889d32ca1a65c8c6155f70e944ca15ed455ade5f27c7af1a3f44
MD5 115f8da3f16369784c9a491517b78ed6
SHA1 88f535739b798b6fae0047668a703eb21ecdfaaa
SHA512 cb17aa13405b16d7d756deae57c1da60d7b480a991b32329d6b6bacc8d2d3fea4116b063ba147bd78fa2b675525c6896bfd0eb3f1b206a4969e94547c43a4839
SSDEEP 1536:jX8hJCCuplz61To/5UKfz61ToIKi+k4Hr4LkMHhodEu9ugDuHu:jXbMdlBIK4p
TLSH
T14273FC57F2C04995887F4C34A5033B7CBFBA5CDE4B210974B49B3A3A4F8CD93569A298
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

be9f48ec-d77b-6201-2dd9-6c5824fde13a.eml

.eml 78KB
email-html-1.txt

.html 68KB

be9f48ec-d77b-6201-2dd9-6c5824fde13a.eml

SHA256 6b1113fe75ed889d32ca1a65c8c6155f70e944ca15ed455ade5f27c7af1a3f44
MD5 115f8da3f16369784c9a491517b78ed6
SHA1 88f535739b798b6fae0047668a703eb21ecdfaaa
SHA512 cb17aa13405b16d7d756deae57c1da60d7b480a991b32329d6b6bacc8d2d3fea4116b063ba147bd78fa2b675525c6896bfd0eb3f1b206a4969e94547c43a4839
SSDEEP 1536:jX8hJCCuplz61To/5UKfz61ToIKi+k4Hr4LkMHhodEu9ugDuHu:jXbMdlBIK4p
TLSH
T14273FC57F2C04995887F4C34A5033B7CBFBA5CDE4B210974B49B3A3A4F8CD93569A298
MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

To

[email protected]

From

[email protected]

Return-Path

010001a03a8bf069-b1aa9bc1-1631-4b12-b0d9-dd3cab6ebc73-000000@amazonses.com

Date

Tue, 25 Aug 2026 20:10:44 +0000

Subject

Completed: Aethonenergy Agreement, Billing & Financial Reports

Content-Type

text/html; charset=utf-8

Received

from PH0P220MB0347.NAMP220.PROD.OUTLOOK.COM (2603:10b6:510:d5::16) by LV8P220MB1637.NAMP220.PROD.OUTLOOK.COM with HTTPS; Tue, 25 Aug 2026 20:11:47 +0000

from SA9P221CA0016.NAMP221.PROD.OUTLOOK.COM (2603:10b6:806:25::21) by PH0P220MB0347.NAMP220.PROD.OUTLOOK.COM (2603:10b6:510:d5::16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.360.8; Tue, 25 Aug 2026 20:10:47 +0000

from SN1PEPF00036F40.namprd05.prod.outlook.com (2603:10b6:806:25:cafe::a9) by SA9P221CA0016.outlook.office365.com (2603:10b6:806:25::21) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.339.12 via Frontend Transport; Tue, 25 Aug 2026 20:10:46 +0000

from a8-13.smtp-out.amazonses.com (54.240.8.13) by SN1PEPF00036F40.mail.protection.outlook.com (10.167.248.24) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.360.3 via Frontend Transport; Tue, 25 Aug 2026 20:10:45 +0000

Received-Spf

Pass (protection.outlook.com: domain of amazonses.com designates 54.240.8.13 as permitted sender) receiver=protection.outlook.com; client-ip=54.240.8.13; helo=a8-13.smtp-out.amazonses.com; pr=C

Message-Id

<010001a03a8bf069-b1aa9bc1-1631-4b12-b0d9-dd3cab6ebc73-000000@email.amazonses.com>

Sharing