Overview

overview

3

Static

static

1

download.eml

windows10-2004-x64

1

download.eml

windows11-ltsc_2024-x64

1

attachment-3

windows10-2004-x64

3

attachment-3

windows11-ltsc_2024-x64

3

email-html-2.html

windows10-2004-x64

3

email-html-2.html

windows11-ltsc_2024-x64

3

email-plain-1.txt

windows10-2004-x64

1

email-plain-1.txt

windows11-ltsc_2024-x64

1

invite.ics

windows10-2004-x64

1

invite.ics

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    download
  • Size 41KB
  • Sample260916-tvmkwsdl4x
  • SHA256 093768915e76c510a3e77dd847667d0bc8b23e1e017fda07b3d9bb54547eee31
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • download
    .eml 41KB
  • attachment-3
    1KB
  • email-html-2.txt
    .html 27KB
  • email-plain-1.txt
    1KB
  • invite.ics
    1KB

download

  • SHA256 093768915e76c510a3e77dd847667d0bc8b23e1e017fda07b3d9bb54547eee31
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Delivered-To

[email protected]

Sender

Google Calendar <[email protected]>

Return-Path

<[email protected]>

Date

Fri, 04 Sep 2026 15:18:02 +0000

Subject

Invitation: Review Before the Deadline @ Fri Sep 4, 2026 10:30am - 11:30am (CDT) ([email protected])

Content-Type

multipart/mixed; boundary="00000000000043983d065aa9c672"

Received

by 2002:a05:7208:c047:b0:10b:aff0:ad4f with SMTP id s7csp9798501rba; Fri, 4 Sep 2026 08:18:03 -0700 (PDT)

from mail-sor-f69.google.com (mail-sor-f69.google.com. [209.85.220.69]) by mx.google.com with SMTPS id 00721157ae682-871497ede99sor28117817b3.14.2026.09.04.08.18.02 for <[email protected]> (Google Transport Security); Fri, 04 Sep 2026 08:18:03 -0700 (PDT)

X-Received

by 2002:a05:690c:e0c6:20b0:836:ec9b:b468 with SMTP id 00721157ae682-8712b5a2bc5mr25778437b3.34.1788535083029; Fri, 04 Sep 2026 08:18:03 -0700 (PDT)

by 2002:a05:690c:a9a:b0:858:ad19:324d with SMTP id 00721157ae682-87125a1c44dmr33915357b3.3.1788535082550; Fri, 04 Sep 2026 08:18:02 -0700 (PDT)

Received-Spf

pass (google.com: domain of [email protected] designates 209.85.220.69 as permitted sender) client-ip=209.85.220.69;

Message-Id

<[email protected]>

Extracted URLs

  • file https://370vowel.velvetiglen.cc/deadline/

  • file https://calendar.google.com/calendar/

  • file https://calendar.google.com/calendar/event?action=RESPOND&eid=MWNhaWQ5YmVqYmpzOXBsazUydGtpczZ2aDMgamFpb25hQGJhdHRlcmllc3BsdXMuY29t&rst=1&tok=MjUjdGltLndpbm5lckB0ZWNob3JlZ29uLm9yZ2Q1N2ViZmNjYTExZjFiZjE3ZTFkZjI3NzQ4ZjFjNzhjNTNmZTYwYzY&ctz=America%2FChicago&hl=en&es=1

  • file https://calendar.google.com/calendar/event?action=RESPOND&eid=MWNhaWQ5YmVqYmpzOXBsazUydGtpczZ2aDMgamFpb25hQGJhdHRlcmllc3BsdXMuY29t&rst=2&tok=MjUjdGltLndpbm5lckB0ZWNob3JlZ29uLm9yZ2Q1N2ViZmNjYTExZjFiZjE3ZTFkZjI3NzQ4ZjFjNzhjNTNmZTYwYzY&ctz=America%2FChicago&hl=en&es=1

  • file https://calendar.google.com/calendar/event?action=RESPOND&eid=MWNhaWQ5YmVqYmpzOXBsazUydGtpczZ2aDMgamFpb25hQGJhdHRlcmllc3BsdXMuY29t&rst=3&tok=MjUjdGltLndpbm5lckB0ZWNob3JlZ29uLm9yZ2Q1N2ViZmNjYTExZjFiZjE3ZTFkZjI3NzQ4ZjFjNzhjNTNmZTYwYzY&ctz=America%2FChicago&hl=en&es=1

  • file https://calendar.google.com/calendar/event?action=VIEW&eid=MWNhaWQ5YmVqYmpzOXBsazUydGtpczZ2aDMgamFpb25hQGJhdHRlcmllc3BsdXMuY29t&tok=MjUjdGltLndpbm5lckB0ZWNob3JlZ29uLm9yZ2Q1N2ViZmNjYTExZjFiZjE3ZTFkZjI3NzQ4ZjFjNzhjNTNmZTYwYzY&ctz=America%2FChicago&hl=en&es=1

  • file https://calendar.google.com/calendar/r/settings

  • file https://calendar.google.com/calendar/r/settings,

  • file https://drive.google.com/drive/folders/2026

  • Show all