【Apple】返金処理の完了をご案内いたします (14[.]1 KB)[.]msg

General

Target
【Apple】返金処理の完了をご案内いたします (14.1 KB).msg
Size 32KB
Sample260910-tewhvssblh
SHA256 cd58508ca125546dd1d791f9561fa7c5072cf3724d3d0a20ca8736a790edbfdc
MD5 1a84e0e79d65dae632247a6aa2095e8f
SHA1 27bafe455c96e5d082f48a746ca4d07aa90007db
SHA512 a790b12db5cc7a484025ff9f2e8b8940b44b380a9cea87b34b2907d1c08cf68a759822d0226b48cf44c2fbbbeebdcc822301a1fa404ef9d591776d9b44e33f64
SSDEEP 384:s2b07wbHnxeaQpzjw7g/r2HI23i2MY2lMn22Vqo+AIwtkTeIvMLUi/rkD2u2A2+1:ssbHxfcd/rOIOigV1d+EKy8pqSXJn
TLSH
T1DDE2422536EA4609F27A8F325DF68093D5367C82EE11979F329D730E0BB1980A461F5F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

【Apple】返金処理の完了をご案内いたします (14.1 KB).msg

.msg 32KB
Apple.png

.png 1KB
Applerefund.HTML

3KB

【Apple】返金処理の完了をご案内いたします (14.1 KB).msg

SHA256 cd58508ca125546dd1d791f9561fa7c5072cf3724d3d0a20ca8736a790edbfdc
MD5 1a84e0e79d65dae632247a6aa2095e8f
SHA1 27bafe455c96e5d082f48a746ca4d07aa90007db
SHA512 a790b12db5cc7a484025ff9f2e8b8940b44b380a9cea87b34b2907d1c08cf68a759822d0226b48cf44c2fbbbeebdcc822301a1fa404ef9d591776d9b44e33f64
SSDEEP 384:s2b07wbHnxeaQpzjw7g/r2HI23i2MY2lMn22Vqo+AIwtkTeIvMLUi/rkD2u2A2+1:ssbHxfcd/rOIOigV1d+EKy8pqSXJn
TLSH
T1DDE2422536EA4609F27A8F325DF68093D5367C82EE11979F329D730E0BB1980A461F5F
MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

To

[email protected]

From

[email protected]

Date

Mon, 7 Sep 2026 22:26:51 -0600

Subject

=?UTF-8?B?44CQQeKAi3BwbGXjgJHov5Tph5Hlh6bnkIbjga7lrozkuobjgpLjgZTmoYg=?= =?UTF-8?B?5YaF44GE44Gf44GX44G+4oGg44GZ?=

Content-Type

multipart/mixed; boundary="----=_NextPart_000_0062_01DD3F68.00EDB530"

Received

from mailsender.fxhxy.com ([137.23.13.53]) by rly13h-eth0.srv.mailcontrol.com (envelope-sender [email protected]) (MIMEDefang) with ESMTP id 6884QqNp1569096 (TLS bits=256 verify=FAIL) for [email protected]; Tue, 08 Sep 2026 04:26:57 +0000 (UTC)

(from mailcontrol@localhost) by rly13h.srv.mailcontrol.com (MailControl) with ESMTP id 6884QvrS1569246 for [email protected]; Tue, 8 Sep 2026 04:26:57 GMT

from mail-out-24.zendesk.com (unknown [192.168.90.07]) by zendesk-mta-egress.mailsender.fxhxy.com (Postfix) with ESMTPS id 418d13ab1c064e519ff3b2291b9c74a2; 2026-09-08 13:26:51

from mail.d266664.mizuho.jp ([181.197.128.103]) (Authenticated sender: [email protected]) by mailsender.fxhxy.com (Perl Net::SMTP) with ESMTPSA id LSQAR6RU-B266-1BC5-51CC.1 for <[email protected]>; TLS1_2, cipher=TLS_AES_256_GCM_SHA384 (authenticated bits=0); Tue, 08 Sep 2026 13:26:51 +0900

from cluster-h.mailcontrol.com (cluster-h.mailcontrol.com [208.87.234.190]) by mta2.gsi.com.mx (Postfix) with ESMTPS id 9700CC465153 for <[email protected]>; Mon, 7 Sep 2026 22:26:58 -0600 (CST)

from mta2.gsi.com.mx (LHLO mta2.gsi.com.mx) (172.20.20.12) by mbox1.gsi.com.mx with LMTP; Mon, 7 Sep 2026 22:26:58 -0600 (CST)

X-Mailer

Zendesk Mailer

Message-Id

<[email protected]>

Extracted URLs

file http://webdefence.global.blackspider.com/urlwrap/?q=AXicFcpLDsIgEADQYW3iziO4M4ONllBXnqCJRyD0Aw0wLUNN9XCezXT93ukAv4uA81FADp_q5pDzG6PxwVIqmQJaiqC0vr-Wdq5q1VwbBdyPa_ad6dCngXI01lN6juz3jXEDV8rMDymNtbSmgt_JRZ52lWyGHgB0LeAPfTonnA&Z
file http://webdefence.global.blackspider.com/urlwrap/?q=AXicFcpLDsIgEADQYW3iziO4M4ONllBXnqCJRyD0Aw0wLUNN9XCezXT93ukAv4uA81FADp_q5pDzG6PxwVIqmQJaiqC0vr-Wdq5q1VwbBdyPa_ad6dCngXI01lN6juz3jXEDV8rMDymNtbSmgt_JRZ52lWyGHgB0LeAPfTonnA&Z'
file https://support.apple.com/ja-jp
file https://support.apple.com/ja-jp'

Sharing