phish_alert_sp2_2[.]0[.]0[.]0 - 2026-09-03T142505[.]100[.]eml

General

Target
phish_alert_sp2_2.0.0.0 - 2026-09-03T142505.100.eml
Size 79KB
Sample260903-ppfsyas1cs
SHA256 239f0e95e466ae1863003bf9f65ca1274ab188e70010edb98b2c4dc0542bfaa0
MD5 23b3d72095638af237bd9f0e4084a5fa
SHA1 49e032594970247e0b679219a0ff31bb2b66247b
SHA512 cc2cc920d2bf6f930aac6a314d40f498c9558d211eed7a23889c6e9e30a0e6755ae3180748bb408c9e586db7bb7dd69e306f1825fc8bc0713ab2ee84bc3aa2e0
SSDEEP 1536:69IeRE7VvX3VQ936B7kcYe6npC/IbtYn9TpFtfP1rr1Ymde680M:6akElFQl6B7qC/I5CTFRP13CAM
TLSH
T1E7836AFF3D524C296B4412ABFBCFE4D46E3E5FCF107508F8A46D2222125D3564AD24A8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

phish_alert_sp2_2.0.0.0 - 2026-09-03T142505.100.eml

.eml 79KB
email-html-2.txt

.html 2KB
email-plain-1.txt

547B

phish_alert_sp2_2.0.0.0 - 2026-09-03T142505.100.eml

SHA256 239f0e95e466ae1863003bf9f65ca1274ab188e70010edb98b2c4dc0542bfaa0
MD5 23b3d72095638af237bd9f0e4084a5fa
SHA1 49e032594970247e0b679219a0ff31bb2b66247b
SHA512 cc2cc920d2bf6f930aac6a314d40f498c9558d211eed7a23889c6e9e30a0e6755ae3180748bb408c9e586db7bb7dd69e306f1825fc8bc0713ab2ee84bc3aa2e0
SSDEEP 1536:69IeRE7VvX3VQ936B7kcYe6npC/IbtYn9TpFtfP1rr1Ymde680M:6akElFQl6B7qC/I5CTFRP13CAM
TLSH
T1E7836AFF3D524C296B4412ABFBCFE4D46E3E5FCF107508F8A46D2222125D3564AD24A8
MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

To

[email protected]

From

[email protected]

Date

Thu, 3 Sep 2026 12:56:59 +0200

Subject

Welcome to REWARDED

Content-Type

multipart/related; boundary="----=_NextPart_000_0000_01DD3BA8.F59E26F0"

Received

from za-smtp-inbound-delivery-1.mimecast.co.za (41.74.197.102) by JN1PEPF00001EDC.mail.protection.outlook.com (10.167.240.21) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.382.8 via Frontend Transport; Thu, 3 Sep 2026 10:57:20 +0000

from JN1PEPF00001EDC.ZAFP275.PROD.OUTLOOK.COM (2603:1086:0:71:cafe::87) by JN3P275CA0017.outlook.office365.com (2603:1086:0:71::16) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.382.11 via Frontend Transport; Thu, 3 Sep 2026 10:57:20 +0000

from pd0mdwk001OB4 (unknown [40.127.0.171]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (secp384r1) server-signature ECDSA (prime256v1)) (No client certificate requested) (Authenticated sender: [email protected]) by mx02.therewardsfactory.com (Postfix) with ESMTPSA id 89CA84DFC31; Thu, 03 Sep 2026 12:56:59 +0200 (SAST)

from mx02.therewardsfactory.com (mx02.therewardsfactory.com [129.232.246.228]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.3, cipher=TLS_AES_256_GCM_SHA384) id za-mta-38-wkHjuC5bNLCkdBaDXAzEGw-1; Thu, 03 Sep 2026 12:57:16 +0200

from JN3P275CA0017.ZAFP275.PROD.OUTLOOK.COM (2603:1086:0:71::16) by CP7P275MB3263.ZAFP275.PROD.OUTLOOK.COM (2603:1086:100:68::7) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.382.10; Thu, 3 Sep 2026 10:57:20 +0000

from CP7P275MB3263.ZAFP275.PROD.OUTLOOK.COM (2603:1086:100:68::7) by JN2P275MB0553.ZAFP275.PROD.OUTLOOK.COM with HTTPS; Thu, 3 Sep 2026 10:59:37 +0000

Received-Spf

Fail (protection.outlook.com: domain of rewarded.co.za does not designate 41.74.197.102 as permitted sender) receiver=protection.outlook.com; client-ip=41.74.197.102; helo=za-smtp-inbound-delivery-1.mimecast.co.za

X-Mailer

Microsoft Outlook 16.0

Message-Id

<[email protected]>

Extracted URLs

file https://www.rewarded.co.za/mywelcome/e85295f7500c4b1faea747a08ca11c65

Sharing