Overview

overview

3

Static

static

1

noname (26).eml

windows10-2004-x64

3

noname (26).eml

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    noname (26).eml
  • Size 41KB
  • Sample260922-vbxgeswzes
  • SHA256 0fd41696d3d35af72bce5376ea7cdd8873e23ec7f560583052491addd31e8ffe
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • noname (26).eml
    .eml 41KB
  • email-html-2.txt
    .html 10KB
  • email-plain-1.txt
    1KB

noname (26).eml

  • SHA256 0fd41696d3d35af72bce5376ea7cdd8873e23ec7f560583052491addd31e8ffe
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

3fo2yahcKAL8st-wjuq3-j0jsyxfylttlqjlttlqj.htr@rsvp.bounces.google.com

Date

Tue, 22 Sep 2026 07:15:26 -0700

Subject

=?UTF-8?Q?Gemini_Enterprise_Live_=E2=80=94_30_September=2C_registratio?= =?UTF-8?Q?n_still_open?=

Content-Type

multipart/alternative; boundary="0000000000008f1ee4065c12ffdf"

Received

from MRYP264MB6527.FRAP264.PROD.OUTLOOK.COM (2603:10a6:501:6c::20) by PATP264MB4549.FRAP264.PROD.OUTLOOK.COM with HTTPS; Tue, 22 Sep 2026 14:15:32 +0000

from PR1P264CA0054.FRAP264.PROD.OUTLOOK.COM (2603:10a6:102:2ca::8) by MRYP264MB6527.FRAP264.PROD.OUTLOOK.COM (2603:10a6:501:6c::20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.428.17; Tue, 22 Sep 2026 14:15:30 +0000

from ZR1PEPF0000E6AE.eurprd05.prod.outlook.com (2603:10a6:102:2ca:cafe::9c) by PR1P264CA0054.outlook.office365.com (2603:10a6:102:2ca::8) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.339.12 via Frontend Transport; Tue, 22 Sep 2026 14:15:30 +0000

from esa.hc2212-17.eu.iphmx.com (194.165.202.183) by ZR1PEPF0000E6AE.mail.protection.outlook.com (10.167.241.85) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.451.8 via Frontend Transport; Tue, 22 Sep 2026 14:15:29 +0000

from mail-oa1-f71.google.com ([209.85.160.71]) by esa20.hc2212-17.eu.iphmx.com with ESMTP/TLS/TLS_AES_256_GCM_SHA384; 22 Sep 2026 16:15:29 +0200

by mail-oa1-f71.google.com with SMTP id 586e51a60fabf-482966c4f4fso1491994fac.1 for <[email protected]>; Tue, 22 Sep 2026 07:15:28 -0700 (PDT)

X-Received

by 2002:a05:6820:2d03:b0:6bd:da26:1b35 with SMTP id 006d021491bc7-6d15ac6e0b1mr2265355eaf.33.1790086526917; Tue, 22 Sep 2026 07:15:26 -0700 (PDT)

Received-Spf

SoftFail (protection.outlook.com: domain of transitioning rsvp.bounces.google.com discourages use of 194.165.202.183 as permitted sender)

Pass (esa.hc2212-17.eu.iphmx.com: domain of 3fo2yahcKAL8st-wjuq3-j0jsyxfylttlqjlttlqj.htr@rsvp.bounces.google.com designates 209.85.160.71 as permitted sender) identity=mailfrom; client-ip=209.85.160.71; receiver=esa.hc2212-17.eu.iphmx.com; envelope-from="3fo2yahcKAL8st-wjuq3-j0jsyxfylttlqjlttlqj.htr@rsvp.bounces.google.com"; x-sender="3fo2yahcKAL8st-wjuq3-j0jsyxfylttlqjlttlqj.htr@rsvp.bounces.google.com"; x-conformance=spf_only; x-record-type="v=spf1"; x-record-text="v=spf1 ip4:74.125.0.0/16 ip4:209.85.128.0/17 ip6:2001:4860:4864::/56 ip6:2404:6800:4864::/56 ip6:2607:f8b0:4864::/56 ip6:2800:3f0:4864::/56 ip6:2a00:1450:4864::/56 ip6:2c0f:fb50:4864::/56 ~all"

Message-Id

<[email protected]>

Extracted URLs

  • file https://rsvp.withgoogle.com/events/2026-smb-gemini-enterprise-webinar-zazmic

  • file https://rsvp.withgoogle.com/unsubscribe?emailId=f7c29a80740143869be015ff79508711&eventId=e7b67f45d6c44a2f9a4ea71348b0bce0&guestId=bad313d76a654f3cb52806fe1829f7bc