General

  • Target
    6d0b19b4-4ba2-28ea-0628-27c3c0bd13ad.eml
  • Size 58KB
  • Sample260910-ez95esxend
  • SHA256 1d1a5fc58870d170d3aec4bc4bc49eba4d7a20b92316270fd8b6fd8f88ca3c98
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • 6d0b19b4-4ba2-28ea-0628-27c3c0bd13ad.eml
    .eml 58KB
  • email-html-1.txt
    .html 49KB

6d0b19b4-4ba2-28ea-0628-27c3c0bd13ad.eml

  • SHA256 1d1a5fc58870d170d3aec4bc4bc49eba4d7a20b92316270fd8b6fd8f88ca3c98
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

bounces+[email protected]

Date

Wed, 09 Sep 2026 18:53:28 +0000 (UTC)

Subject

FT Form Aethon Energy

Content-Type

text/html; charset=utf-8

Received

from SA1P220MB1607.NAMP220.PROD.OUTLOOK.COM (2603:10b6:806:3cc::5) by SA1P220MB1870.NAMP220.PROD.OUTLOOK.COM with HTTPS; Wed, 9 Sep 2026 18:55:24 +0000

from SJ0PR03CA0211.namprd03.prod.outlook.com (2603:10b6:a03:39f::6) by SA1P220MB1607.NAMP220.PROD.OUTLOOK.COM (2603:10b6:806:3cc::5) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.406.7; Wed, 9 Sep 2026 18:53:31 +0000

from SJ1PEPF000037AA.namprd03.prod.outlook.com (2603:10b6:a03:39f:cafe::2b) by SJ0PR03CA0211.outlook.office365.com (2603:10b6:a03:39f::6) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.406.8 via Frontend Transport; Wed, 9 Sep 2026 18:53:31 +0000

from s.wfbtzhsq.outbound-mail.sendgrid.net (159.183.224.100) by SJ1PEPF000037AA.mail.protection.outlook.com (10.167.244.184) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.406.5 via Frontend Transport; Wed, 9 Sep 2026 18:53:30 +0000

by recvd-b9cff7684-7ms9f with SMTP id recvd-b9cff7684-7ms9f-1-6AA1AB28-74 2026-09-09 18:53:28.764092696 +0000 UTC m=+3715361.904027775

from NDc0MDMxNTc (unknown) by geopod-ismtpd-110 (SG) with HTTP id n-Kp7H86Rs6iUWXa8bq_bw Wed, 09 Sep 2026 18:53:28.747 +0000 (UTC)

Received-Spf

Pass (protection.outlook.com: domain of em6854.fiergs.org.br designates 159.183.224.100 as permitted sender) receiver=protection.outlook.com; client-ip=159.183.224.100; helo=s.wfbtzhsq.outbound-mail.sendgrid.net; pr=C

Message-Id

<n-Kp7H86Rs6iUWXa8bq_bw@geopod-ismtpd-110>