Overview

overview

7

Static

static

5

Ihre Unter...84.msg

windows10-2004-x64

1

Ihre Unter...84.msg

windows11-ltsc_2024-x64

4

Versicheru...at.pdf

windows10-2004-x64

7

Versicheru...at.pdf

windows11-ltsc_2024-x64

7

logo.png

windows10-2004-x64

1

logo.png

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    Ihre Unterlagen AS-9311002026 163945284.msg
  • Size 272KB
  • Sample260826-pmxnnsyfqa
  • SHA256 a78a580ecb2bfbf7b5f36e812f273d70d0a11870ed65b6a01d72a46c459e1134
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
pdf

Malware Config

Signatures

  • Malformed data in PDF

    A PDF can contain malformed data to evade detection

    pdf

File Explorer

  • Ihre Unterlagen AS-9311002026 163945284.msg
    .msg 272KB
  • Versicherungsschein_AS-9311002026_163945284_Ausstellungsdatum_26-08-2026_seekirchen@frigologo.at.pdf
    .pdf 169KB
  • logo.png
    .png 13KB

Ihre Unterlagen AS-9311002026 163945284.msg

  • SHA256 a78a580ecb2bfbf7b5f36e812f273d70d0a11870ed65b6a01d72a46c459e1134
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

011001a03e027177-1ca1aec6-fd36-4cf5-b972-b20892574892-000000@mailbounce.allianz-kundencenter.de

Date

Wed, 26 Aug 2026 12:19:02 +0000

Subject

Ihre Unterlagen AS-9311002026 163945284

Content-Type

multipart/mixed; boundary="===============1091658369355137772=="

Received

from 52exchange02.frigologo.at (192.168.1.42) by 52exchange01.frigologo.at (192.168.1.40) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2507.37 via Mailbox Transport; Wed, 26 Aug 2026 14:19:06 +0200

from 52exchange02.frigologo.at (192.168.1.42) by 52exchange02.frigologo.at (192.168.1.42) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2507.44; Wed, 26 Aug 2026 14:19:05 +0200

from IMSVA.frigologo.at (192.168.1.128) by 52exchange02.frigologo.at (192.168.1.42) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2507.44 via Frontend Transport; Wed, 26 Aug 2026 14:19:05 +0200

from IMSVA.frigologo.at (unknown [127.0.0.1]) by IMSVA (Postfix) with ESMTP id CA81396056 for <[email protected]>; Wed, 26 Aug 2026 14:19:04 +0200 (CEST)

from mailw-out7.lix.aon.at (unknown [192.168.2.61]) by IMSVA.frigologo.at (Postfix) with ESMTPS id 68AF19603B for <[email protected]>; Wed, 26 Aug 2026 14:19:04 +0200 (CEST)

from e240-1.smtp-out.eu-north-1.amazonses.com (EHLO e240-1.smtp-out.eu-north-1.amazonses.com) [23.251.240.1] by mailw.lix.aon.at with ESMTP TLS id 8292; Wed, 26 Aug 2026 14:19:03 +0200

Received-Spf

pass (23.251.240.1 is a permitted sender for mailbounce.allianz-kundencenter.de)

Message-Id

<011001a03e027177-1ca1aec6-fd36-4cf5-b972-b20892574892-000000@eu-north-1.amazonses.com>

Extracted URLs

  • file https://de-de.facebook.com/allianzdeutschland

  • file https://twitter.com/allianz

  • file https://www.allianz-trade.com/de_CH/newsletter/unsubscribe.html?163945284

  • file https://www.allianz.de/content/dam/onemarketing/azde/azd/media/e-mail/kraft/icon-facebook.png

  • file https://www.allianz.de/content/dam/onemarketing/azde/azd/media/e-mail/kraft/icon-linkedin.png

  • file https://www.allianz.de/content/dam/onemarketing/azde/azd/media/e-mail/kraft/icon-twitter.png

  • file https://www.allianz.de/content/dam/onemarketing/azde/azd/media/e-mail/kraft/icon-xing.png

  • file https://www.allianz.de/content/dam/onemarketing/azde/azd/media/e-mail/kraft/icon-youtube.png

  • file https://www.allianz.de/datenschutz?163945284

  • Show all