phish_alert_sp2_2[.]0[.]0[.]0[.]eml

General

Target
phish_alert_sp2_2.0.0.0.eml
Size 28KB
Sample260827-vlfxesydkf
SHA256 d682e641c720ed7f823e74acbfe7b4ee59dbe75e13f72b3859d4b85ef778a451
MD5 5c775f72295c325c2a265b806ce7e464
SHA1 2c95cc8777bbe3eb5bcfedae28c48f0b0dce071f
SHA512 6955402600182a6b3a563f81926d238a8a918df0e372d0cbe4c87fe222f3f45276d203c42e3fc74d299314dcd97a32a08491f7cd32675c6180f7c384032d26ba
SSDEEP 384:95pOtztP3TbwmV0FTePdfP8d6xK3duKRIRfP9ElyoZHQ3vpuefqB:yjbZV4aP8ddurP9EQCHU2B
TLSH
T1EFD21E02F1D4089640EF87D9A02733783B7908D997766E75B26EBFFC6B49CE21205369
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

phish_alert_sp2_2.0.0.0.eml

.eml 28KB
email-html-1.txt

.html 16KB

phish_alert_sp2_2.0.0.0.eml

SHA256 d682e641c720ed7f823e74acbfe7b4ee59dbe75e13f72b3859d4b85ef778a451
MD5 5c775f72295c325c2a265b806ce7e464
SHA1 2c95cc8777bbe3eb5bcfedae28c48f0b0dce071f
SHA512 6955402600182a6b3a563f81926d238a8a918df0e372d0cbe4c87fe222f3f45276d203c42e3fc74d299314dcd97a32a08491f7cd32675c6180f7c384032d26ba
SSDEEP 384:95pOtztP3TbwmV0FTePdfP8d6xK3duKRIRfP9ElyoZHQ3vpuefqB:yjbZV4aP8ddurP9EQCHU2B
TLSH
T1EFD21E02F1D4089640EF87D9A02733783B7908D997766E75B26EBFFC6B49CE21205369
MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

From

[email protected]

In-Reply-To

CAKdBKGcdX9bqhOaS6AKmP3zoaOjVODwCZ5taSss=rAJ=hwoWhg@mail.gmail.com

Return-Path

[email protected]

Date

Thu, 27 Aug 2026 13:23:39 -0300

Subject

=?UTF-8?B?W0VYVEVSTkFMXSBGVzogSGVpZ2h0IHRvIFZhbml0eSBDb3VudGVy?= =?UTF-8?B?dG9wcw==?=

Content-Type

multipart/mixed; boundary="----sinikael-?=_1-17878479137460.7831805560273104"

Received

from PH0PR16MB4247.namprd16.prod.outlook.com (2603:10b6:510:5c::8) by IA0PPF2383B6239.namprd16.prod.outlook.com with HTTPS; Thu, 27 Aug 2026 16:23:50 +0000

from SJ0PR13CA0106.namprd13.prod.outlook.com (2603:10b6:a03:2c5::21) by PH0PR16MB4247.namprd16.prod.outlook.com (2603:10b6:510:5c::8) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.292.25; Thu, 27 Aug 2026 16:23:44 +0000

from SJ1PEPF0000231D.namprd03.prod.outlook.com (2603:10b6:a03:2c5:cafe::13) by SJ0PR13CA0106.outlook.office365.com (2603:10b6:a03:2c5::21) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.382.8 via Frontend Transport; Thu, 27 Aug 2026 16:23:44 +0000

from mail-qt1-x830.google.com (2607:f8b0:4864:20::830) by SJ1PEPF0000231D.mail.protection.outlook.com (2603:10b6:a0f:fc02::1ea) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.360.3 via Frontend Transport; Thu, 27 Aug 2026 16:23:43 +0000

by mail-qt1-x830.google.com with SMTP id d75a77b69052e-51c2a818fc4so552331cf.2 for <[email protected]>; Thu, 27 Aug 2026 09:23:43 -0700 (PDT)

from WINVAG4D824NQ7 ([104.223.56.103]) by smtp.gmail.com with ESMTPSA id d75a77b69052e-52e42597780sm40449371cf.9.2026.08.27.09.23.40 for <[email protected]> (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Thu, 27 Aug 2026 09:23:41 -0700 (PDT)

X-Received

by 2002:a05:622a:c17:b0:52e:f66:f1a4 with SMTP id d75a77b69052e-52fb96bb480mr971691cf.38.1787847822148; Thu, 27 Aug 2026 09:23:42 -0700 (PDT)

Received-Spf

Pass (protection.outlook.com: domain of gmail.com designates 2607:f8b0:4864:20::830 as permitted sender) receiver=protection.outlook.com; client-ip=2607:f8b0:4864:20::830; helo=mail-qt1-x830.google.com; pr=C

X-Mailer

Microsoft Outlook 16.0

Message-Id

<[email protected]>

Extracted URLs

file https://aka.ms/LearnAboutSenderIdentification

Resubmissions

Sharing