Overview

overview

6

Static

static

5

ORDEN DE C....A.svg

windows10-ltsc_2021-x64

6

Resubmissions

02/09/2026, 00:19

260902-al8xzszfnh5

01/09/2026, 23:12

260901-268aqsfc396

01/09/2026, 23:10

260901-25zl7sygnc5

01/09/2026, 21:46

260901-1m1k4sbp4t6

01/09/2026, 21:45

260901-1mb8hseh625

01/09/2026, 21:32

260901-1dpggsbn2v6

Sharing

Copy URL Twitter E-mail

General

  • Target
    phish_alert_sp2_2.0.0.0 (12).eml
  • Size 199KB
  • Sample260901-268aqsfc39
  • SHA256 455c788b77e1a03dae571d505964365c6a3d005e2e88045b113d2599debea7ed
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
svgjavascript

Malware Config

Signatures

  • Suspicious SVG script tag 1 IoCs
    svgjavascript
  • SVG contains script element(s) 1 IoCs
    svgjavascript

File Explorer

  • phish_alert_sp2_2.0.0.0 (12).eml
    .eml 199KB
  • ORDEN DE COMPRA Mini Market Setenta y Nueve Z, C.A.svg
    .svg .js .xml 129KB
  • email-html-1.txt
    .html 8KB

phish_alert_sp2_2.0.0.0 (12).eml

  • SHA256 455c788b77e1a03dae571d505964365c6a3d005e2e88045b113d2599debea7ed
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

[email protected]

Date

Tue, 1 Sep 2026 17:08:16 +0200

Subject

=?UTF-8?B?T1JERU4gREUgQ09NUFJBIE1pbmkgTWFya2V0IFNldGVudGEgeSBO?= =?UTF-8?B?dWV2ZSBaLCBDLkEu?=

Content-Type

multipart/mixed; boundary="----sinikael-?=_1-17882855890840.23045919042290652"

Received

from BN7PPFC05E94A88.namprd16.prod.outlook.com (2603:10b6:40f:fc02::724) by BN6PR16MB3041.namprd16.prod.outlook.com with HTTPS; Tue, 1 Sep 2026 15:16:30 +0000

from SJ0PR03CA0125.namprd03.prod.outlook.com (2603:10b6:a03:33c::10) by BN7PPFC05E94A88.namprd16.prod.outlook.com (2603:10b6:40f:fc02::724) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.382.10; Tue, 1 Sep 2026 15:09:19 +0000

from SJ5PEPF000001D3.namprd05.prod.outlook.com (2603:10b6:a03:33c:cafe::1) by SJ0PR03CA0125.outlook.office365.com (2603:10b6:a03:33c::10) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.382.10 via Frontend Transport; Tue, 1 Sep 2026 15:09:19 +0000

from mail-ej1-f46.google.com (209.85.218.46) by SJ5PEPF000001D3.mail.protection.outlook.com (10.167.242.55) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.382.8 via Frontend Transport; Tue, 1 Sep 2026 15:09:19 +0000

by mail-ej1-f46.google.com with SMTP id a640c23a62f3a-c250e3315b4so45275266b.0 for <[email protected]>; Tue, 01 Sep 2026 08:09:19 -0700 (PDT)

X-Received

by 2002:a17:907:980e:b0:c21:7bf1:2c88 with SMTP id a640c23a62f3a-c2557134d99mr1149279266b.2.1788275356836; Tue, 01 Sep 2026 08:09:16 -0700 (PDT)

Received-Spf

Pass (protection.outlook.com: domain of gmail.com designates 209.85.218.46 as permitted sender) receiver=protection.outlook.com; client-ip=209.85.218.46; helo=mail-ej1-f46.google.com; pr=C

Message-Id

<CANiOck7Si6EWM0GEMGS25sQkeO8_aY64Z3C7z=3pqPx2Ut-dVw@mail.gmail.com>

Extracted URLs

  • file https://aka.ms/LearnAboutSenderIdentification