Overview

overview

5

Static

static

1

7bbd324b-2...43.eml

windows10-2004-x64

5

7bbd324b-2...43.eml

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    7bbd324b-2a75-7322-ddef-8dda290ffe43.eml
  • Size 679KB
  • Sample260826-ebyrgsyvgv
  • SHA256 ec8988d0b99a6f3b905a1e97f7f4cea1f282b8b8966d1c7c0ebddb78d0eb3118
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • 7bbd324b-2a75-7322-ddef-8dda290ffe43.eml
    .eml 679KB
  • 2020-03-03 - Proposition_politique de placement_2020_FdsCSA.pdf
    .pdf 397KB
  • Capture d’écran, le 2026-08-25 à 14.22.50.png
    .png 65KB
  • email-html-2.txt
    .html 4KB
  • email-html-3.txt
    .html 238B
  • email-html-4.txt
    .html 7KB
  • email-html-5.txt
    .html 3KB
  • email-plain-1.txt
    5KB
  • image003.png
    .png 3KB

7bbd324b-2a75-7322-ddef-8dda290ffe43.eml

  • SHA256 ec8988d0b99a6f3b905a1e97f7f4cea1f282b8b8966d1c7c0ebddb78d0eb3118
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

In-Reply-To

YQXPR01MB4070F2C416EEA2162C529EE0B0AF2@YQXPR01MB4070.CANPRD01.PROD.OUTLOOK.COM

Return-Path

[email protected]

Date

Tue, 25 Aug 2026 15:57:25 -0400

Subject

=?utf-8?Q?Re=3A_Revue_de_la_r=C3=A9partition_d=27actifs_=7C_Fonda?= =?utf-8?Q?tion_des_artistes_-_Pr=C3=A9sentation_de_l=27analyse_de_PBI?=

Content-Type

multipart/alternative; boundary="Apple-Mail=_B120546B-1B4B-4C65-BA8D-71AD932510CB"

Received

from YT3PR01CA0068.CANPRD01.PROD.OUTLOOK.COM (2603:10b6:b01:84::14) by YT3PR01MB8450.CANPRD01.PROD.OUTLOOK.COM (2603:10b6:b01:9f::13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.360.6; Tue, 25 Aug 2026 19:58:00 +0000

from YT1PEPF00001E8D.CANPRD01.PROD.OUTLOOK.COM (2603:10b6:b01:84:cafe::86) by YT3PR01CA0068.outlook.office365.com (2603:10b6:b01:84::14) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.360.7 via Frontend Transport; Tue, 25 Aug 2026 19:58:00 +0000

from eu-smtp-inbound-delivery-1.mimecast.com (91.220.42.227) by YT1PEPF00001E8D.mail.protection.outlook.com (10.167.241.54) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.360.3 via Frontend Transport; Tue, 25 Aug 2026 19:58:00 +0000

from mail-qt1-f178.google.com (mail-qt1-f178.google.com [209.85.160.178]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.3, cipher=TLS_AES_256_GCM_SHA384) id uk-mta-55-8vmO6mCjMNayBmlubvloCA-1; Tue, 25 Aug 2026 20:57:51 +0100

by mail-qt1-f178.google.com with SMTP id d75a77b69052e-51c0cea8883so1977451cf.1 for <[email protected]>; Tue, 25 Aug 2026 12:57:50 -0700 (PDT)

from smtpclient.apple ([142.115.208.232]) by smtp.gmail.com with ESMTPSA id 6a1803df08f44-90cc62282casm7550006d6.0.2026.08.25.12.57.46 (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Tue, 25 Aug 2026 12:57:48 -0700 (PDT)

X-Received

by 2002:a05:622a:4a85:b0:52e:25b3:6b0b with SMTP id d75a77b69052e-52e2ed06d20mr108240421cf.16.1787687869216; Tue, 25 Aug 2026 12:57:49 -0700 (PDT)

Received-Spf

SoftFail (protection.outlook.com: domain of transitioning gmail.com discourages use of 91.220.42.227 as permitted sender)

X-Mailer

Apple Mail (2.3864.600.51.1.1)

Message-Id

<[email protected]>

Extracted URLs

  • file https://url.uk.m.mimecastprotect.com/s/1Rv3CqYRktjJPmECXhKphECEMh

  • file https://url.uk.m.mimecastprotect.com/s/ildgCvoqpszrjMYUAslxhQMSQ3

  • file https://url.uk.m.mimecastprotect.com/s/r-M1CrRZlIl40Lkh4i6Zh4hQlN

  • file https://url.uk.m.mimecastprotect.com/s/uItaCpQwjc3pNXVIPf2NhGE76D