Overview

overview

3

Static

static

1

SIC - Mens...RE.eml

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    SIC - Mensaje informativo - Vencimiento de la Gaceta _ Periodo de oposición finalizado - Su Ref_ REGISTRO MARCA OPTIMAL SUPPLY - Solicitud No_ SD2026_0062734 - Usuario responsable_ VIRREYSOLIS.eml
  • Size 37KB
  • Sample260916-tfhndsdj61
  • SHA256 8da6e63d7e5c43d90aa99d82bda1dfe6c998100776d4352607d00b49ea14cd62
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • SIC - Mensaje informativo - Vencimiento de la Gaceta _ Periodo de oposición finalizado - Su Ref_ REGISTRO MARCA OPTIMAL SUPPLY - Solicitud No_ SD2026_0062734 - Usuario responsable_ VIRREYSOLIS.eml
    .eml 37KB
  • email-html-2.txt
    9KB
  • email-plain-1.txt
    6KB

SIC - Mensaje informativo - Vencimiento de la Gaceta _ Periodo de oposición finalizado - Su Ref_ REGISTRO MARCA OPTIMAL SUPPLY - Solicitud No_ SD2026_0062734 - Usuario responsable_ VIRREYSOLIS.eml

  • SHA256 8da6e63d7e5c43d90aa99d82bda1dfe6c998100776d4352607d00b49ea14cd62
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Delivered-To

[email protected]

In-Reply-To

CAMOXc7yRGqNyK+yTSTa4+[email protected]

Return-Path

<seguridadinformaticavs+[email protected]>

Date

Wed, 16 Sep 2026 10:45:05 -0500

Subject

=?UTF-8?Q?Fwd=3A_SIC_=2D_Mensaje_informativo_=2D_Vencimiento_de_la_G?= =?UTF-8?Q?aceta_=2F_Periodo_de_oposici=C3=B3n_finalizado_=2D_Su_Ref=3A_REGISTRO_?= =?UTF-8?Q?MARCA_OPTIMAL_SUPPLY_=2D_Solicitud_No=3A_SD2026=2F0062734_=2D_Usuari?= =?UTF-8?Q?o_responsable=3A_VIRREYSOLIS?=

Content-Type

multipart/alternative; boundary="000000000000401d4f065b9b8fa6"

Received

by 2002:a05:640c:18c4:b0:278:b2ce:825f with SMTP id h4csp6751505eit; Wed, 16 Sep 2026 08:45:51 -0700 (PDT)

from inpost.tmes.trendmicro.com (inpost.tmes.trendmicro.com. [18.208.22.108]) by mx.google.com with ESMTPS id 6a1803df08f44-912476d9b96si2790596d6.248.2026.09.16.08.45.51 for <[email protected]> (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 16 Sep 2026 08:45:51 -0700 (PDT)

from 18.208.22.130_.trendmicro.com (unknown [192.168.180.157]) by inpost.tmes.trendmicro.com (Postfix) with SMTP id 08701C0000F0 for <[email protected]>; Wed, 16 Sep 2026 15:45:51 +0000 (UTC)

from repost01.tmes.trendmicro.com (unknown [18.208.22.130]) by inpre01.tmes.trendmicro.com (Trend Micro Email Security) with ESMTPS id 883EEC00042A for <[email protected]>; Wed, 16 Sep 2026 15:45:50 +0000 (UTC)

from 209.85.219.69_.trendmicro.com (unknown [192.168.180.157]) by repost01.tmes.trendmicro.com (Postfix) with SMTP id 5BB8DC000361 for <[email protected]>; Wed, 16 Sep 2026 15:45:50 +0000 (UTC)

from mail-qv1-f69.google.com (unknown [209.85.219.69]) by repre01.tmes.trendmicro.com (Trend Micro Email Security) with ESMTPS id 14FBEC000400 for <[email protected]>; Wed, 16 Sep 2026 15:45:48 +0000 (UTC)

by mail-qv1-f69.google.com with SMTP id 6a1803df08f44-912054a1c29sf77589906d6.2 for <[email protected]>; Wed, 16 Sep 2026 08:45:48 -0700 (PDT)

by 2002:a05:6214:82:b0:912:349f:2289 with SMTP id 6a1803df08f44-91247e2c35fls637466d6.2.-pod-prod-08-us; Wed, 16 Sep 2026 08:45:46 -0700 (PDT)

from inpost.tmes.trendmicro.com (inpost.tmes.trendmicro.com. [18.208.22.105]) by mx.google.com with ESMTPS id 6a1803df08f44-9123bf0f177si43539726d6.88.2026.09.16.08.45.45 for <[email protected]> (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 16 Sep 2026 08:45:45 -0700 (PDT)

from 18.208.22.141_.trendmicro.com (unknown [192.168.180.157]) by inpost.tmes.trendmicro.com (Postfix) with SMTP id BA00FC000352 for <[email protected]>; Wed, 16 Sep 2026 15:45:45 +0000 (UTC)

from repost01.tmes.trendmicro.com (unknown [18.208.22.141]) by inpre01.tmes.trendmicro.com (Trend Micro Email Security) with ESMTPS id 2125DC00042D for <[email protected]>; Wed, 16 Sep 2026 15:45:45 +0000 (UTC)

from 209.85.222.70_.trendmicro.com (unknown [192.168.172.172]) by repost01.tmes.trendmicro.com (Postfix) with SMTP id 087C3C0002AF for <[email protected]>; Wed, 16 Sep 2026 15:45:45 +0000 (UTC)

from mail-ua1-f70.google.com (unknown [209.85.222.70]) by repre01.tmes.trendmicro.com (Trend Micro Email Security) with ESMTPS id AD547C00014A for <[email protected]>; Wed, 16 Sep 2026 15:45:42 +0000 (UTC)

by mail-ua1-f70.google.com with SMTP id a1e0cc1a2514c-980682ebf05so957925241.3 for <[email protected]>; Wed, 16 Sep 2026 08:45:42 -0700 (PDT)

X-Received

by 2002:a05:690e:1502:b0:66c:effb:3706 with SMTP id 956f58d0204a3-67163222c26mr862450d50.38.1789573551346; Wed, 16 Sep 2026 08:45:51 -0700 (PDT)

by 2002:a05:6214:d0e:b0:90e:8c9e:9554 with SMTP id 6a1803df08f44-9123d7b2ddamr51096926d6.29.1789573547373; Wed, 16 Sep 2026 08:45:47 -0700 (PDT)

by 2002:a05:6214:d0e:b0:90e:8c9e:9554 with SMTP id 6a1803df08f44-9123d7b2ddamr51096436d6.29.1789573546902; Wed, 16 Sep 2026 08:45:46 -0700 (PDT)

by 2002:a05:6214:488e:b0:90e:8422:d154 with SMTP id 6a1803df08f44-9123d723e75mr58497006d6.13.1789573545913; Wed, 16 Sep 2026 08:45:45 -0700 (PDT)

by 2002:a05:6122:551:b0:5c2:c0ae:a2e8 with SMTP id 71dfb90a1353d-5c99ad23b86mr3406609e0c.7.1789573542087; Wed, 16 Sep 2026 08:45:42 -0700 (PDT)

by 2002:a05:6122:551:b0:5c2:c0ae:a2e8 with SMTP id 71dfb90a1353d-5c99ad23b86mr3406573e0c.7.1789573541660; Wed, 16 Sep 2026 08:45:41 -0700 (PDT)

Received-Spf

pass (google.com: domain of seguridadinformaticavs+[email protected] designates 209.85.219.69 as permitted sender) client-ip=209.85.219.69;

pass (google.com: domain of [email protected] designates 209.85.222.70 as permitted sender) client-ip=209.85.222.70;

Message-Id

<CANGrZ25GYaRc6C1RkP6VmnCxmgK9a1nj9Jy5abn8BZfB_WDQOw@mail.gmail.com>

Extracted URLs

  • file http://sipi.sic.gov.co

  • file http://sipi.sic.gov.co,

  • file http://www.sic.gov.co

  • file http://www.sic.gov.co,