Overview

overview

3

Static

static

1

f36b9549-0...42.eml

windows10-2004-x64

3

f36b9549-0...42.eml

windows11-ltsc_2024-x64

1

Resubmissions

10/09/2026, 15:58

260910-tehxrssbkg3

10/09/2026, 15:54

260910-tclwmsdp311

Sharing

Copy URL Twitter E-mail

General

  • Target
    f36b9549-0cf6-d701-afa6-005ad61cda42.eml
  • Size 21KB
  • Sample260910-tehxrssbkg
  • SHA256 21a73874d623c2119c668e0bb33df1575c119748faec11322e9c86af1d9e8545
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • f36b9549-0cf6-d701-afa6-005ad61cda42.eml
    .eml 21KB
  • email-html-2.txt
    .html 12KB

f36b9549-0cf6-d701-afa6-005ad61cda42.eml

  • SHA256 21a73874d623c2119c668e0bb33df1575c119748faec11322e9c86af1d9e8545
  • MD5 SHA1 SHA512 SSDEEP TLSH
Password
H@rper2026

Email Headers

Return-Path

[email protected]

Date

Wed, 09 Sep 2026 13:44:00 +0000

Subject

OSHA 2026: Regulatory Updates and Compliance Changes, Deregulation, and Enforcement Updates

Content-Type

multipart/alternative; boundary="_----W5TgA030POrEygGcBGypwA===_57/BF-04700-D8D51AA6"

Received

from MW6PR20MB6695.namprd20.prod.outlook.com (2603:10b6:303:23b::9) by BN8PR20MB2420.namprd20.prod.outlook.com with HTTPS; Wed, 9 Sep 2026 13:47:04 +0000

from PH1PEPF000132FA.NAMP220.PROD.OUTLOOK.COM (2603:10b6:518:1::2b) by MW6PR20MB6695.namprd20.prod.outlook.com (2603:10b6:303:23b::9) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.406.8; Wed, 9 Sep 2026 13:45:23 +0000

from SN1PEPF000252A0.namprd05.prod.outlook.com (2a01:111:f403:f90e::4) by PH1PEPF000132FA.outlook.office365.com (2603:1036:903:47::3) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.406.6 via Frontend Transport; Wed, 9 Sep 2026 13:45:23 +0000

from mta-203-46-112.sparkpostmail.com (168.203.46.112) by SN1PEPF000252A0.mail.protection.outlook.com (10.167.242.7) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.406.5 via Frontend Transport; Wed, 9 Sep 2026 13:45:22 +0000

from [10.95.215.55] ([10.95.215.55]) by i-0559509f991175267.mta3vrest.sd.prd.sparkpost (ecelerity 5.3.0.76406 r(msys-ecelerity:tags/5.3.0.11)) with REST id 70/8E-30358-4B261AA6; Wed, 09 Sep 2026 13:44:20 +0000

Received-Spf

Pass (protection.outlook.com: domain of eu.sparkpostmail2.com designates 168.203.46.112 as permitted sender) receiver=protection.outlook.com; client-ip=168.203.46.112; helo=mta-203-46-112.sparkpostmail.com; pr=E

Message-Id

<70.8E.30358.4B261AA6@i-0559509f991175267.mta3vrest.sd.prd.sparkpost>

Extracted URLs

  • file https://go.eu.sparkpostmail2.com/f/a/4n1dOch-PTFPv6QB6ZCORA~~/AAPXjBA~/Fda9FYZEsK7LU8dfRwjx3VjEV2Rr0KSiCtNtJQWapDS6Cn_c0UMmp366sPUYBG_IsqIl51NnFxtQBJR6BpXpAlGOIXBIKZr8HASZ0kOYJOIf7tsokDz47u8H9qZd0KXsgpDC0GX0opY8fXoat6XX9Q~~

  • file https://go.eu.sparkpostmail2.com/f/a/uYCLPXbHAq7FowSqs5izRA~~/AAPXjBA~/dYMuw1sHfj0xtOL-7sLHDs4CwMfi9xSzMH83gbvTdoTfS7SDslN7CFWdeK7_utSjoxLeu6A-wMt5vtMevAMY7lhi0NLbKR5_-1v8EA0L3Cd_Jb0AP4A-tTOkbhmvU355WJKSCNaM-6zuebVizUtcWCz1HOPSNgft25VggmYTcQyErtvGeg9iDyHT1yxw6gMweCWH7rHiP-IUfjs6HHB_pZNE7sxMx-HU1i7hSam93aw6a4pOczPyHULM8AEuRNo3