Resubmissions

10/09/2026, 19:21

260910-x2331avdkc3

10/09/2026, 19:19

260910-x1zzysed473

10/09/2026, 19:17

260910-xzcg9sxtgw4

General

  • Target
    RE_ ICC-ES Editorial Revision-ESR-4633-02 Engineer Assignment.eml
  • Size 137KB
  • Sample260910-x2331avdkc
  • SHA256 cdf26cb8afb0a32ecd59f1318e86b04bef2e6d892f218a5b553f1531f0c90c8b
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • RE_ ICC-ES Editorial Revision-ESR-4633-02 Engineer Assignment.eml
    .eml 137KB
  • email-html-2.txt
    .html 43KB
  • email-plain-1.txt
    8KB
  • image001.png
    .png 8KB
  • image002.png
    .png 1KB
  • image003.png
    .png 1KB
  • image004.png
    .png 1KB
  • image007.jpg
    .jpg 823B
  • image008.png
    .png 12KB
  • image009.jpg
    .jpg 12KB

RE_ ICC-ES Editorial Revision-ESR-4633-02 Engineer Assignment.eml

  • SHA256 cdf26cb8afb0a32ecd59f1318e86b04bef2e6d892f218a5b553f1531f0c90c8b
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

In-Reply-To

CH3PR18MB5617389ED705FB307E8AA933C6B72@CH3PR18MB5617.namprd18.prod.outlook.com

Date

Thu, 10 Sep 2026 18:24:45 +0000

Subject

RE: ICC-ES Editorial Revision-ESR-4633-02 Engineer Assignment

Content-Type

multipart/related; boundary="_010_DM6PR18MB366538A1E3D5BCF5B5E0465DC6BF2DM6PR18MB3665namp_"; type="multipart/alternative"

Received

from BY5PR04MB6422.namprd04.prod.outlook.com (2603:10b6:a03:1ee::14) by MN2PR04MB6958.namprd04.prod.outlook.com with HTTPS; Thu, 10 Sep 2026 18:25:10 +0000

from DS1P221CA0021.NAMP221.PROD.OUTLOOK.COM (2603:10b6:8:242::12) by BY5PR04MB6422.namprd04.prod.outlook.com (2603:10b6:a03:1ee::14) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.406.9; Thu, 10 Sep 2026 18:25:01 +0000

from CY4PEPF0000EE39.namprd03.prod.outlook.com (2603:10b6:8:242:cafe::22) by DS1P221CA0021.outlook.office365.com (2603:10b6:8:242::12) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.406.9 via Frontend Transport; Thu, 10 Sep 2026 18:25:00 +0000

from us-smtp-inbound-delivery-1.mimecast.com (170.10.128.131) by CY4PEPF0000EE39.mail.protection.outlook.com (10.167.242.11) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.406.5 via Frontend Transport; Thu, 10 Sep 2026 18:25:00 +0000

from PH7PR06CU001.outbound.protection.outlook.com (mail-westus3azon11010060.outbound.protection.outlook.com [52.101.201.60]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.3, cipher=TLS_AES_256_GCM_SHA384) id us-mta-369-34uzGyx0O5OKe20aJJUiqQ-1; Thu, 10 Sep 2026 14:24:56 -0400

from DM6PR18MB3665.namprd18.prod.outlook.com (2603:10b6:5:2ad::22) by PH3PPF0F44C6CD2.namprd18.prod.outlook.com (2603:10b6:518:1::c86) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.406.9; Thu, 10 Sep 2026 18:24:45 +0000

from DM6PR18MB3665.namprd18.prod.outlook.com ([fe80::b516:cfda:d132:1122]) by DM6PR18MB3665.namprd18.prod.outlook.com ([fe80::b516:cfda:d132:1122%4]) with mapi id 15.21.0406.007; Thu, 10 Sep 2026 18:24:45 +0000

Received-Spf

SoftFail (protection.outlook.com: domain of transitioning cornerstone-bb.com discourages use of 170.10.128.131 as permitted sender)

Message-Id

<DM6PR18MB366538A1E3D5BCF5B5E0465DC6BF2@DM6PR18MB3665.namprd18.prod.outlook.com>

Extracted URLs

  • file https://myportal.icc-es.org/

  • file https://url.us.m.mimecastprotect.com/s/-uXUCyPn0RUJAE5NUQimmix_r3C?domain=icc-es.org

  • file https://url.us.m.mimecastprotect.com/s/S7PbCxkmPQUBPKoJfvhEEiyA6VJ?domain=aka.ms

  • file https://url.us.m.mimecastprotect.com/s/YQZdCADxwytVGMA9cQt99iGqjr7?domain=cornerstonebuildingbrands.com

  • file https://url.us.m.mimecastprotect.com/s/axIUCBByxzCAz35Vs1uyyi2Usvc?domain=icc-es.org

  • file https://url.us.m.mimecastprotect.com/s/axIUCBByxzCAz35Vs1uyyi2Usvc?domain=icc-es.org/

  • file https://url.us.m.mimecastprotect.com/s/qIRLCzpoR0inOvoRFKs77i9pmf1?domain=iccsafe.org/

  • file https://url.us.m.mimecastprotect.com/s/uYosCwplOPiPgX3LtVfGGiJUfay?domain=fortifybuildingsolutions.com/

  • file https://url.us.m.mimecastprotect.com/s/v53rCDkAzBUMDQlBFRCGGij6vb7?domain=myportal.icc-es.org/