Overview

overview

1

Static

static

1

suspected_...0).eml

windows10-2004-x64

1

suspected_...0).eml

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    suspected_phishing_email (50).eml
  • Size 15KB
  • Sample260922-qmryvstybz
  • SHA256 aeaaac296f4a37c62a8d49c5c758161f3823fae3d8dbdcfed8760b2ace2eb34f
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • suspected_phishing_email (50).eml
    .eml 15KB
  • email-html-1.txt
    406B

suspected_phishing_email (50).eml

  • SHA256 aeaaac296f4a37c62a8d49c5c758161f3823fae3d8dbdcfed8760b2ace2eb34f
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

[email protected]

Date

Tue, 22 Sep 2026 13:09:32 GMT

Tue, 22 Sep 2026 09:09:17 -0400

Subject

Pat, group coverage?

Pat, group coverage?

Content-Type

text/html; charset=UTF-8

Received

from CY8PR14MB6338.namprd14.prod.outlook.com (2603:10b6:930:85::22) by CH2PR14MB4024.namprd14.prod.outlook.com with HTTPS; Tue, 22 Sep 2026 13:09:31 +0000

from BN0PR03CA0040.namprd03.prod.outlook.com (2603:10b6:408:e7::15) by CY8PR14MB6338.namprd14.prod.outlook.com (2603:10b6:930:85::22) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.428.13; Tue, 22 Sep 2026 13:09:26 +0000

from LV8PEPF0000005B.namprd02.prod.outlook.com (2603:10b6:408:e7:cafe::46) by BN0PR03CA0040.outlook.office365.com (2603:10b6:408:e7::15) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.451.13 via Frontend Transport; Tue, 22 Sep 2026 13:09:26 +0000

from MRWPR03CU001.outbound.protection.outlook.com (2a01:111:f403:da07::1) by LV8PEPF0000005B.mail.protection.outlook.com (2603:10b6:40f:fc02::188) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.451.8 via Frontend Transport; Tue, 22 Sep 2026 13:09:25 +0000

from PR3PR01MB7955.eurprd01.prod.exchangelabs.com (2603:10a6:102:172::9) by DB8PR01MB6328.eurprd01.prod.exchangelabs.com (2603:10a6:10:15f::13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.428.16; Tue, 22 Sep 2026 13:09:21 +0000

from PR3PR01MB7955.eurprd01.prod.exchangelabs.com ([fe80::edc4:ee63:55f8:dee6]) by PR3PR01MB7955.eurprd01.prod.exchangelabs.com ([fe80::edc4:ee63:55f8:dee6%4]) with mapi id 15.21.0428.015; Tue, 22 Sep 2026 13:09:21 +0000

Received-Spf

Pass (protection.outlook.com: domain of clients.qualitycarebenefits.com designates 2a01:111:f403:da07::1 as permitted sender) receiver=protection.outlook.com; client-ip=2a01:111:f403:da07::1; helo=MRWPR03CU001.outbound.protection.outlook.com; pr=C

Message-Id

<a2cd4176-39ed-46e6-bb07-db7ceca145fb@clients.qualitycarebenefits.com>