Overview

overview

4

Static

static

1

suspected_...9).eml

windows10-2004-x64

4

suspected_...9).eml

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    suspected_phishing_email (29).eml
  • Size 38KB
  • Sample260910-xhqcssxsbt
  • SHA256 63476c93230bba3a8a95c2660c3bf81a4ea7718c642b5f7d71afc472bd10d8ba
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • suspected_phishing_email (29).eml
    .eml 38KB
  • email-html-1.txt
    .html 29KB

suspected_phishing_email (29).eml

  • SHA256 63476c93230bba3a8a95c2660c3bf81a4ea7718c642b5f7d71afc472bd10d8ba
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

011101a08c9287c2-bf8b8898-2ba4-42e0-bc6b-412a94867f4a-000000@us-west-1.amazonses.com

Date

Thu, 10 Sep 2026 18:29:29 GMT

Thu, 10 Sep 2026 18:26:48 +0000

Subject

null

Content-Type

text/html; charset=UTF-8

Received

from SAWPR15MB996772.namprd15.prod.outlook.com (2603:10b6:806:55f::5) by CH3PR15MB6327.namprd15.prod.outlook.com with HTTPS; Thu, 10 Sep 2026 18:29:28 +0000

from PH8PR02CA0049.namprd02.prod.outlook.com (2603:10b6:510:2da::25) by SAWPR15MB996772.namprd15.prod.outlook.com (2603:10b6:806:55f::5) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.406.9; Thu, 10 Sep 2026 18:26:49 +0000

from SJ1PEPF000023D6.namprd21.prod.outlook.com (2603:10b6:510:2da:cafe::13) by PH8PR02CA0049.outlook.office365.com (2603:10b6:510:2da::25) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.406.7 via Frontend Transport; Thu, 10 Sep 2026 18:26:49 +0000

from i82-196.smtp-out.us-west-1.amazonses.com (24.110.82.196) by SJ1PEPF000023D6.mail.protection.outlook.com (10.167.244.71) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.428.0 via Frontend Transport; Thu, 10 Sep 2026 18:26:48 +0000

Received-Spf

Pass (protection.outlook.com: domain of us-west-1.amazonses.com designates 24.110.82.196 as permitted sender) receiver=protection.outlook.com; client-ip=24.110.82.196; helo=i82-196.smtp-out.us-west-1.amazonses.com; pr=C

Message-Id

<011101a08c9287c2-bf8b8898-2ba4-42e0-bc6b-412a94867f4a-000000@us-west-1.amazonses.com>

Extracted URLs

  • file https://aka.ms/LearnAboutSenderIdentification

  • file https://click.nedine.com/CL0/http:%2F%2Fwww.maccabigb.org%2F/1/011101a08c9287c2-bf8b8898-2ba4-42e0-bc6b-412a94867f4a-000000/Pjtm06S5qZ08RQr5L-Z3_9rOfoclDRlTM0NwfIIwhhU=258

  • file https://click.nedine.com/CL0/http:%2F%2Fwww.maccabigb.org%2F/2/011101a08c9287c2-bf8b8898-2ba4-42e0-bc6b-412a94867f4a-000000/l5xxWhaQzT2js90DhwWL4wMq3yeoh3NKS-7j12TYWcA=258

  • file https://click.nedine.com/CL0/http:%2F%2Fwww.maccabigb.org%2F/3/011101a08c9287c2-bf8b8898-2ba4-42e0-bc6b-412a94867f4a-000000/yM47SKPtf7XK-5IgqJvvh49xRMTiKnJ3mgcsW9xNYw8=258

  • file https://click.nedine.com/CL0/http:%2F%2Fwww.maccabigb.org%2F/4/011101a08c9287c2-bf8b8898-2ba4-42e0-bc6b-412a94867f4a-000000/wJdVL4U19Bafxu_scfh59BLXpWiPcuWzz0kS8vyHOmY=258

  • file https://click.nedine.com/CL0/http:%2F%2Fwww.maccabigb.org%2F/5/011101a08c9287c2-bf8b8898-2ba4-42e0-bc6b-412a94867f4a-000000/-jStR0kitdzPjLFOSc-o7c35DaFGNiZcv_oLWP9lOg8=258

  • file https://click.nedine.com/CL0/http:%2F%2Fwww.maccabigb.org%2F/6/011101a08c9287c2-bf8b8898-2ba4-42e0-bc6b-412a94867f4a-000000/NpPd99-_MEIkm_0iE8vO5UabtwfDPkrh9XA_rY1GV18=258

  • file https://click.nedine.com/CL0/https:%2F%2Fwww.anritsu.com%2FSSO%2FGateWay.aspx%3Freturnurl=%2F%2F%2F%2Fwww.bandirun.com/1/011101a08c9287c2-bf8b8898-2ba4-42e0-bc6b-412a94867f4a-000000/5uddU4B2R6_lSk-wGfCP8WspGtpyvgA4ikCzBpujPdw=258