202609161746_Re_ Upcoming Environment Migration Notice _ Herramientas Poderosas_mcalderon[.]zip

General

Target
202609161746_Re_ Upcoming Environment Migration Notice _ Herramientas Poderosas_mcalderon.zip
Size 22KB
Sample260916-3svm6at1as
SHA256 4512b2d5d245eaeeaa9ccd876a0d9922bdb73f9f9c9c6e1ee37dcd756a68cfb6
MD5 64c39dc03ae144dedb69c271828526f5
SHA1 14c850bea7876d56b172b1f604bb95309a2269d8
SHA512 4d2d9212958f5d11113e196a638ba1b9e2b91f4e0c52423526234f204ed225799a1befd4f636bfaa26ceab903b8e78dc01bea347c7d3e6c4c41b2de0b6447e02
SSDEEP 384:+KkAvwF3pjxVcA07Ujf+sWYHFvRHx5bpDCF0bqbjy0mG//3SXh0nlaA3TBMpscD+:+KkAvepjji6VvRRC0eXy0pECnlaA3TBH
TLSH
T1E7A2E03D52A402ACB55D53DB2780A097FD314EBE08C180F3B2CDBF9471DDA1C3AA116A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

202609161746_Re_ Upcoming Environment Migration Notice _ Herramientas Poderosas_mcalderon.zip

.zip 22KB
20260916205336-Re_ Upcoming Environment Migration Notice _ Herramientas Poderosas-mcalderon.eml

.eml 70KB
email-html-2.txt

.html 37KB
email-plain-1.txt

9KB

202609161746_Re_ Upcoming Environment Migration Notice _ Herramientas Poderosas_mcalderon.zip

SHA256 4512b2d5d245eaeeaa9ccd876a0d9922bdb73f9f9c9c6e1ee37dcd756a68cfb6
MD5 64c39dc03ae144dedb69c271828526f5
SHA1 14c850bea7876d56b172b1f604bb95309a2269d8
SHA512 4d2d9212958f5d11113e196a638ba1b9e2b91f4e0c52423526234f204ed225799a1befd4f636bfaa26ceab903b8e78dc01bea347c7d3e6c4c41b2de0b6447e02
SSDEEP 384:+KkAvwF3pjxVcA07Ujf+sWYHFvRHx5bpDCF0bqbjy0mG//3SXh0nlaA3TBMpscD+:+KkAvepjji6VvRRC0eXy0pECnlaA3TBH
TLSH
T1E7A2E03D52A402ACB55D53DB2780A097FD314EBE08C180F3B2CDBF9471DDA1C3AA116A
MD5 SHA1 SHA512 SSDEEP TLSH

20260916205336-Re_ Upcoming Environment Migration Notice _ Herramientas Poderosas-mcalderon.eml

SHA256 aa0c4d58ecbb6d7f18ae4efa9699f6c6dd6dd1271dbba592fbc4767c016ac662
MD5 25c8c24ed2878c16b84dc61a4c7b4341
SHA1 9186e1400ee35f46fc83fe9bd6fabc494665d817
SHA512 271d94d2edf3760b2f10e5a456d0d5bd003826ce18446e0c5df8ed7f1d7c3bc75aa070640c2c0ec96be79809875ad55d59d7df285285c0658dc428514767b93f
SSDEEP 1536:nVNmIC52BU1ZT6aIyGNn9kxYlHWrqYhZobHec:+ILBkJuIxYlHrDJ
TLSH
T10D635BB14AD617B7FC600D40D82CBF4BA235BFCA35A29042942D9FCAD868BF51CD154A
MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

To

[email protected]

From

[email protected]

In-Reply-To

PH3PPF1A7FD50FD7082DA0E5C603443A50982B92@PH3PPF1A7FD50FD.namprd22.prod.outlook.com

Date

Wed, 16 Sep 2026 20:53:10 +0000

Subject

CAS::Re: Upcoming Environment Migration Notice | Herramientas Poderosas

Content-Type

multipart/alternative; boundary="_000_CADzxRZmLbUuhA2VchEuB8gwQKdru1ny1UkC3p8hCCMh4cAmailgmai_"

Received

from CH3PR22MB4444.namprd22.prod.outlook.com (2603:10b6:610:1a7::21) by PH3PPF1A7FD50FD.namprd22.prod.outlook.com with HTTPS; Wed, 16 Sep 2026 20:53:36 +0000

from BL1P221CA0016.NAMP221.PROD.OUTLOOK.COM (2603:10b6:208:2c5::29) by CH3PR22MB4444.namprd22.prod.outlook.com (2603:10b6:610:1a7::21) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.406.10; Wed, 16 Sep 2026 20:53:26 +0000

from BN7PEPF00000094.namprd03.prod.outlook.com (2603:10b6:208:2c5:cafe::1a) by BL1P221CA0016.outlook.office365.com (2603:10b6:208:2c5::29) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.428.9 via Frontend Transport; Wed, 16 Sep 2026 20:53:25 +0000

from mail-ed2-x12.google.com (2a00:1450:4864:33::12) by BN7PEPF00000094.mail.protection.outlook.com (2603:10b6:40f:fc02::448) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.428.7 via Frontend Transport; Wed, 16 Sep 2026 20:53:23 +0000

by mail-ed2-x12.google.com with SMTP id 4fb4d7f45d1cf-6a9984f9a59so282185a12.0 for <[email protected]>; Wed, 16 Sep 2026 13:53:23 -0700 (PDT)

Received-Spf

Pass (protection.outlook.com: domain of segura.security designates 2a00:1450:4864:33::12 as permitted sender) receiver=protection.outlook.com; client-ip=2a00:1450:4864:33::12; helo=mail-ed2-x12.google.com; pr=C

Message-Id

<CADz_xRZmLbUuhA2VchEuB8gwQK_dr-u1ny1UkC3p8hC+[email protected]>

Extracted URLs

file https://app.mailtastic.de/api/linkserve/campaign/a653d2ed-f5f2-49c0-b662-227408e98a84/86865
file https://drive.google.com/file/d/1bxMNrDq846GGEe1XLeiMZwfq1oywQLEQ/view?usp=sharing
file https://facebook.com/seguraidentity
file https://forms.gle/PeqgnpGTDPyeKkUH7
file https://instagram.com/segura.security
file https://linkedin.com/company/segurasecurity
file https://www.cognism.com/email-signature-generator?utm_source=website&utm_medium=freesignaturegenerator&utm_campaign=marketing&utm_term=inbound
file https://youtube.com/@segura-security

Sharing