Resubmissions

24/09/2026, 13:39

260924-qx8pcsvdrb5

24/09/2026, 13:33

260924-qtks5as12q5

General

  • Target
    a3c7b803-4c56-d01b-7170-502df2ff6cc2.eml
  • Size 201KB
  • Sample260924-qx8pcsvdrb
  • SHA256 369377177db33452675bfb9919e49cf1122d94e93463a1b6b2bbf1a8e61269d2
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
pdf

Malware Config

Signatures

  • Malformed data in PDF

    A PDF can contain malformed data to evade detection

File Explorer

  • a3c7b803-4c56-d01b-7170-502df2ff6cc2.eml
    .eml 201KB
  • Jacob Jensen & Associates, PLLC-encrypted.pdf
    .pdf 132KB
  • email-html-2.txt
    .html 3KB
  • email-plain-1.txt
    438B

a3c7b803-4c56-d01b-7170-502df2ff6cc2.eml

  • SHA256 369377177db33452675bfb9919e49cf1122d94e93463a1b6b2bbf1a8e61269d2
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

[email protected]

Date

Wed, 23 Sep 2026 16:51:22 +0000

Subject

[EXTERNAL] Jacob Jensen & Associates, PLLC

Content-Type

multipart/mixed; boundary="_004_CH3PR11MB8239AE3C8A7C72747A6E6FE8C4822CH3PR11MB8239namp_"

Received

from SABPR14MB958827.namprd14.prod.outlook.com (2603:10b6:806:508::11) by SN7PR14MB4431.namprd14.prod.outlook.com with HTTPS; Wed, 23 Sep 2026 16:57:30 +0000

from CH0PR04CA0112.namprd04.prod.outlook.com (2603:10b6:610:75::27) by SABPR14MB958827.namprd14.prod.outlook.com (2603:10b6:806:508::11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.428.15; Wed, 23 Sep 2026 16:57:25 +0000

from CH2PEPF00000148.namprd02.prod.outlook.com (2603:10b6:610:75:cafe::ad) by CH0PR04CA0112.outlook.office365.com (2603:10b6:610:75::27) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.451.16 via Frontend Transport; Wed, 23 Sep 2026 16:57:24 +0000

from mx0b-0028ab01.pphosted.com (148.163.154.55) by CH2PEPF00000148.mail.protection.outlook.com (10.167.244.105) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.451.8 via Frontend Transport; Wed, 23 Sep 2026 16:57:24 +0000

from pps.filterd (m0337642.ppops.net [127.0.0.1]) by mx0a-0028ab01.pphosted.com (8.18.1.11/8.18.1.11) with ESMTP id 68NGUGqa1838845; Wed, 23 Sep 2026 11:57:23 -0500

from mw6pr02cu001.outbound.protection.outlook.com (mail-westus2azon11022134.outbound.protection.outlook.com [52.101.48.134]) by mx0a-0028ab01.pphosted.com (PPS) with ESMTPS id 4gvcq3skn7-1 (version=TLSv1.3 cipher=TLS_AES_256_GCM_SHA384 bits=256 verify=OK); Wed, 23 Sep 2026 11:51:26 -0500 (CDT)

from CH3PR11MB8239.namprd11.prod.outlook.com (2603:10b6:610:156::21) by SA3PR11MB403611.namprd11.prod.outlook.com (2603:10b6:806:58c::16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.451.14; Wed, 23 Sep 2026 16:51:23 +0000

from CH3PR11MB8239.namprd11.prod.outlook.com ([fe80::c786:7f61:b932:23c9]) by CH3PR11MB8239.namprd11.prod.outlook.com ([fe80::c786:7f61:b932:23c9%5]) with mapi id 15.21.0428.015; Wed, 23 Sep 2026 16:51:23 +0000

Received-Spf

Fail (protection.outlook.com: domain of jacobjensenlaw.com does not designate 148.163.154.55 as permitted sender) receiver=protection.outlook.com; client-ip=148.163.154.55; helo=mx0b-0028ab01.pphosted.com;

Message-Id

<CH3PR11MB8239AE3C8A7C72747A6E6FE8C4822@CH3PR11MB8239.namprd11.prod.outlook.com>