Seja o homem que você quer ser[.]eml

General

Target
Seja o homem que você quer ser.eml
Size 306KB
Sample260831-gpf5pseh47
SHA256 7c2ae9770354535e263807f52a067f28fe8eb0b23ef0b498f5ec885dddca9396
MD5 7336da2358287c2ad9b5fd38366505e3
SHA1 64eb15b3369bf13f4fe78338aa7f98bd0e6606a3
SHA512 f147006bd10b547d4d135c2264927fb919fab7f8a298024572dc63edfc0fe785f8c3f60c3ddf03e86e13433da0ce6f01a6ebaa2021a8fcb89e3a82494803ae31
SSDEEP 6144:FTkzeEiTfFRywLPX7MT1XL7tLLQR10UAVebK29quWl7L01S1cSaaW2cX:FTkzeEoXrMp75LIv24rS4S1tW2S
TLSH
T1596402189B6B5E578B7250E67417FD47F2D03C43645202E022BC9BF779C92888F5B92A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

Seja o homem que você quer ser.eml

.eml 306KB
email-html-2.txt

.html 7KB
email-plain-1.txt

865B

Seja o homem que você quer ser.eml

SHA256 7c2ae9770354535e263807f52a067f28fe8eb0b23ef0b498f5ec885dddca9396
MD5 7336da2358287c2ad9b5fd38366505e3
SHA1 64eb15b3369bf13f4fe78338aa7f98bd0e6606a3
SHA512 f147006bd10b547d4d135c2264927fb919fab7f8a298024572dc63edfc0fe785f8c3f60c3ddf03e86e13433da0ce6f01a6ebaa2021a8fcb89e3a82494803ae31
SSDEEP 6144:FTkzeEiTfFRywLPX7MT1XL7tLLQR10UAVebK29quWl7L01S1cSaaW2cX:FTkzeEoXrMp75LIv24rS4S1tW2S
TLSH
T1596402189B6B5E578B7250E67417FD47F2D03C43645202E022BC9BF779C92888F5B92A
MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

To

[email protected]

From

[email protected]

Return-Path

alertaseguranca+[email protected]

Date

Sun, 30 Aug 2026 23:05:48 +0300

Subject

=?utf-8?B?U2VqYSBvIGhvbWVtIHF1ZSB2b2PDqiBxdWVyIHNlcg==?=

Content-Type

multipart/related; type="multipart/alternative"; boundary="----=_NextPart_000_0006_01DD38D3.DCB3F8E0"

Received

from AS1PR03MB8238.eurprd03.prod.outlook.com (2603:10a6:20b:471::13) by AM6PR03MB4568.eurprd03.prod.outlook.com with HTTPS; Sun, 30 Aug 2026 20:13:53 +0000

from AS9P194CA0022.EURP194.PROD.OUTLOOK.COM (2603:10a6:20b:46d::28) by AS1PR03MB8238.eurprd03.prod.outlook.com (2603:10a6:20b:471::13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.360.13; Sun, 30 Aug 2026 20:13:49 +0000

from AM3PEPF00009B9F.eurprd04.prod.outlook.com (2603:10a6:20b:46d:cafe::44) by AS9P194CA0022.outlook.office365.com (2603:10a6:20b:46d::28) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.360.13 via Frontend Transport; Sun, 30 Aug 2026 20:13:49 +0000

from nat.eu.perception-point.io (99.80.189.20) by AM3PEPF00009B9F.mail.protection.outlook.com (10.167.16.24) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.382.8 via Frontend Transport; Sun, 30 Aug 2026 20:13:49 +0000

from DB3PR08CU002.outbound.protection.outlook.com (mail-db3pr08cu00205.outbound.protection.outlook.com [40.93.64.85]) by inbound-smtp.eu-west-1.amazonaws.com with SMTP id 4tnnrg2248d8520op1qgiphbm18sq5kj029g6f81 for [email protected]; Sun, 30 Aug 2026 20:13:46 +0000 (UTC)

from DU6P191CA0041.EURP191.PROD.OUTLOOK.COM (2603:10a6:10:53f::21) by PAXPR03MB7610.eurprd03.prod.outlook.com (2603:10a6:102:204::22) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.360.13; Sun, 30 Aug 2026 20:13:42 +0000

from DU2PEPF00028D0D.eurprd03.prod.outlook.com (2603:10a6:10:53f:cafe::a5) by DU6P191CA0041.outlook.office365.com (2603:10a6:10:53f::21) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.360.13 via Frontend Transport; Sun, 30 Aug 2026 20:13:42 +0000

from AM0PR83CU005.outbound.protection.outlook.com (52.102.161.9) by DU2PEPF00028D0D.mail.protection.outlook.com (10.167.242.21) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.382.8 via Frontend Transport; Sun, 30 Aug 2026 20:13:41 +0000

from AS4P251CA0025.EURP251.PROD.OUTLOOK.COM (2603:10a6:20b:5d3::12) by VI0PR10MB9693.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:800:33a::15) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.360.13; Sun, 30 Aug 2026 20:13:26 +0000

from AM4PEPF00025F96.EURPRD83.prod.outlook.com (2603:10a6:20b:5d3:cafe::7e) by AS4P251CA0025.outlook.office365.com (2603:10a6:20b:5d3::12) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.360.13 via Frontend Transport; Sun, 30 Aug 2026 20:13:26 +0000

from mail.fastship.my (62.173.146.177) by AM4PEPF00025F96.mail.protection.outlook.com (10.167.16.5) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.382.0 via Frontend Transport; Sun, 30 Aug 2026 20:13:26 +0000

from mail.fastship.my (labe.tilabe.autos [185.225.69.39]) by mail.fastship.my (Postfix) with ESMTPA id 4C501A491E; Sun, 30 Aug 2026 23:05:30 +0300 (EEST)

Received-Spf

Fail (protection.outlook.com: domain of wizink.pt does not designate 99.80.189.20 as permitted sender) receiver=protection.outlook.com; client-ip=99.80.189.20; helo=nat.eu.perception-point.io;

pass (spfCheck: domain of wizink.pt designates 40.93.64.85 as permitted sender) client-ip=40.93.64.85; envelope-from=alertaseguranca+[email protected]; helo=DB3PR08CU002.outbound.protection.outlook.com;

Pass (protection.outlook.com: domain of wizink.pt designates 52.102.161.9 as permitted sender) receiver=protection.outlook.com; client-ip=52.102.161.9; helo=AM0PR83CU005.outbound.protection.outlook.com; pr=C

Pass (protection.outlook.com: domain of myshipping.rent designates 62.173.146.177 as permitted sender) receiver=protection.outlook.com; client-ip=62.173.146.177; helo=mail.fastship.my; pr=C

Message-Id

<[email protected]>

Extracted URLs

file https://g.cavera.click/supersalelinks7/

Sharing