Overview

overview

4

Static

static

1

Facebook D...3).msg

windows10-2004-x64

4

Sharing

Copy URL Twitter E-mail

General

  • Target
    Facebook Data Breach (3).msg
  • Size 93KB
  • Sample260924-mkveesbd66
  • SHA256 33b720b388c3a4188856401481014f7ec6ef3b80bdea0828850c666030cff611
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • Facebook Data Breach (3).msg
    .msg 93KB

Facebook Data Breach (3).msg

  • SHA256 33b720b388c3a4188856401481014f7ec6ef3b80bdea0828850c666030cff611
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

[email protected]

Date

Sat, 19 Sep 2026 14:03:09 +0000

Subject

=?utf-8?q?Facebook_Data_Breach?=

Content-Type

multipart/mixed; boundary="===============7358545022985696827=="

Received

from AM9PR04MB7572.eurprd04.prod.outlook.com (2603:10a6:20b:2d4::22) by PAWPR04MB10053.eurprd04.prod.outlook.com with HTTPS; Sat, 19 Sep 2026 14:04:09 +0000

from AS9PR06CA0541.eurprd06.prod.outlook.com (2603:10a6:20b:485::13) by AM9PR04MB7572.eurprd04.prod.outlook.com (2603:10a6:20b:2d4::22) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.428.15; Sat, 19 Sep 2026 14:03:24 +0000

from AMS1EPF0000008F.eurprd05.prod.outlook.com (2603:10a6:20b:485:cafe::64) by AS9PR06CA0541.outlook.office365.com (2603:10a6:20b:485::13) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.428.15 via Frontend Transport; Sat, 19 Sep 2026 14:03:23 +0000

from inpost.tmes.trendmicro.eu (18.185.115.103) by AMS1EPF0000008F.mail.protection.outlook.com (10.167.242.86) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.451.8 via Frontend Transport; Sat, 19 Sep 2026 14:03:23 +0000

from 54.247.243.159_.trendmicro.com (unknown [172.21.200.186]) by inpost.tmes.trendmicro.eu (Postfix) with SMTP id CAB23C00037C for <[email protected]>; Sat, 19 Sep 2026 14:03:23 +0000 (UTC)

from mailrelaysrv.com (unknown [54.247.243.159]) by inpre01.tmes.trendmicro.eu (Trend Micro Email Security) with ESMTPS id AB025C000429 for <[email protected]>; Sat, 19 Sep 2026 14:03:10 +0000 (UTC)

Received-Spf

PermError (protection.outlook.com: domain of mailrelaysrv.com used an invalid SPF mechanism)

Message-Id

<178982658957.1.2135194205615627000@7702bca5d37d>

Extracted URLs

  • file http://rank.com

  • file https://saa-eu-content.phishinsight.trendmicro.com/static/saa/system/templates/assets/img/facebook_logo.jfif

  • file https://traveltoitalynow.net/pages/d3ce3e38-0e05-4119-a345-47989de82d43/5ceb0de2140a7b82abae04bfeae14f3c712c7e22ed39d4c7635c4b81f6401332ec00f135f67f61f06269e760263c3a4f8e31ff8d48c2f780e328b750c8efb16b

  • file https://traveltoitalynow.net/pages/img/5ceb0de2140a7b82abae04bfeae14f3c712c7e22ed39d4c7635c4b81f6401332ec00f135f67f61f06269e760263c3a4f8e31ff8d48c2f780e328b750c8efb16b