Overview

overview

1

Static

static

1

suspected_...6).eml

windows10-2004-x64

1

suspected_...6).eml

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    suspected_phishing_email (56).eml
  • Size 21KB
  • Sample260925-yb821ahb93
  • SHA256 f5f9fcbd6e8295c793606d4ee8bedbb44d178c4425ff1557c57ddc5da811e5de
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • suspected_phishing_email (56).eml
    .eml 21KB
  • email-html-1.txt
    .html 13KB

suspected_phishing_email (56).eml

  • SHA256 f5f9fcbd6e8295c793606d4ee8bedbb44d178c4425ff1557c57ddc5da811e5de
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

010001a0d9fed1e8-36ec4619-3ffc-45eb-86ff-3fe43b866982-000000@amazonses.com

Date

Fri, 25 Sep 2026 19:15:56 GMT

Fri, 25 Sep 2026 19:15:50 +0000

Subject

null

Content-Type

text/html; charset=UTF-8

Received

from CH2PR14MB3941.namprd14.prod.outlook.com (2603:10b6:610:7f::10) by CH2PR14MB4024.namprd14.prod.outlook.com with HTTPS; Fri, 25 Sep 2026 19:15:55 +0000

from PH8PR22CA0023.namprd22.prod.outlook.com (2603:10b6:510:2d1::21) by CH2PR14MB3941.namprd14.prod.outlook.com (2603:10b6:610:7f::10) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.451.19; Fri, 25 Sep 2026 19:15:53 +0000

from MW1PEPF0001615F.namprd21.prod.outlook.com (2603:10b6:510:2d1:cafe::72) by PH8PR22CA0023.outlook.office365.com (2603:10b6:510:2d1::21) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.451.19 via Frontend Transport; Fri, 25 Sep 2026 19:15:52 +0000

from a48-101.smtp-out.amazonses.com (54.240.48.101) by MW1PEPF0001615F.mail.protection.outlook.com (10.167.249.90) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.451.0 via Frontend Transport; Fri, 25 Sep 2026 19:15:51 +0000

Received-Spf

Pass (protection.outlook.com: domain of amazonses.com designates 54.240.48.101 as permitted sender) receiver=protection.outlook.com; client-ip=54.240.48.101; helo=a48-101.smtp-out.amazonses.com; pr=C

Message-Id

<010001a0d9fed1e8-36ec4619-3ffc-45eb-86ff-3fe43b866982-000000@email.amazonses.com>

Extracted URLs

  • file https://click.crystalclearcodec.com/CL0/https:/cx.quadient.com/preference_center_en%3FelqTrackId=417ef5a66d01428aa357183522851b42&elq=a096f07e6efa4aef969fcc7026fa6dfd&elqaid=19022&elqat=1&elqCampaignId=9673&elqcst=272&elqcsid=42&elqak=8AF52263600943F63ABF1186CC53C4C8FE156CB68A2F1D13234E93CAABE059D56EA5/1/010001a0d9fed1e8-36ec4619-3ffc-45eb-86ff-3fe43b866982-000000/YmcZVh0KqMl2Y7qbW_Q9hih7OUFl1EsGxlrMBy1TjkA=452

  • file https://click.crystalclearcodec.com/CL0/https:/cx.quadient.com/preference_center_en%3FelqTrackId=a91d3730f5f440e88a098939c1b8bbea&elq=a096f07e6efa4aef969fcc7026fa6dfd&elqaid=19022&elqat=1&elqCampaignId=9673&elqcst=272&elqcsid=42&elqak=8AF554D7E0E33600ADC66E363145D675788B6CB68A2F1D13234E93CAABE059D56EA5/1/010001a0d9fed1e8-36ec4619-3ffc-45eb-86ff-3fe43b866982-000000/h1ZzlIi25aV1n70MynI6wmropHHjRxKD1TWDdA2Ss9U=452

  • file https://click.crystalclearcodec.com/CL0/https:/links.notification.intuit.com/ss/c/u001.JgxtAn8J1MyK4V3VLPhhd5SVJehHiUpLsCv8GUaj6JCIGVC-0S7jlsoOZp-2ykWj/4uc/FHFaqBUyTWiK-dXnLhEJ6A/h1/h001.dqtnWecqXIwprMu_JUdsqzT9s6zP8tB1WQs5DkbPc_s/1/010001a0d9fed1e8-36ec4619-3ffc-45eb-86ff-3fe43b866982-000000/cFDkkkOf0m4qQGlgocUnPAFvmIhDhZ7Kc9vj4TLfNW4=452

  • file https://click.crystalclearcodec.com/CL0/https:/twitter.com/QuadientAP/%3FelqTrackId=30c1cf42865b4916b4af6a2b749b5843&elq=a096f07e6efa4aef969fcc7026fa6dfd&elqaid=19022&elqat=1&elqCampaignId=9673&elqcst=272&elqcsid=42&elqak=8AF5FBD6C9FB0D03B8A8B59A8DE244C4B06E6CB68A2F1D13234E93CAABE059D56EA5/1/010001a0d9fed1e8-36ec4619-3ffc-45eb-86ff-3fe43b866982-000000/EYPJrZcMSdEE3gxgQ9RrSuLh13XqwGjqkofFaS3rrdI=452

  • file https://click.crystalclearcodec.com/CL0/https:/www.facebook.com/BeanworksAP/%3FelqTrackId=33af7a9ed74b492c9bf8f48867fba80e&elq=a096f07e6efa4aef969fcc7026fa6dfd&elqaid=19022&elqat=1&elqCampaignId=9673&elqcst=272&elqcsid=42&elqak=8AF5615FBDADB62330C67786668434C37A826CB68A2F1D13234E93CAABE059D56EA5/1/010001a0d9fed1e8-36ec4619-3ffc-45eb-86ff-3fe43b866982-000000/1mIx-qGggtGZ8o7zxByBFRksSsM5fxkTbg4DBkRAzBc=452

  • file https://click.crystalclearcodec.com/CL0/https:/www.linkedin.com/company/quadient-ap-automation/%3FelqTrackId=3f852a4e7f2d4df3b07e287bcafc701b&elq=a096f07e6efa4aef969fcc7026fa6dfd&elqaid=19022&elqat=1&elqCampaignId=9673&elqcst=272&elqcsid=42&elqak=8AF5B6A00CB473FFE7F08B012BFD468F92A16CB68A2F1D13234E93CAABE059D56EA5/1/010001a0d9fed1e8-36ec4619-3ffc-45eb-86ff-3fe43b866982-000000/z47r0alpJHtPD-JP0FaB7GV6Bl8hhQ60--ccgIhZXtQ=452

  • file https://click.crystalclearcodec.com/CL0/https:/www.quadient.com/quadient-website-privacy-statement%3FelqTrackId=7f9a16c5a5b84433921a4156434079c1&elq=a096f07e6efa4aef969fcc7026fa6dfd&elqaid=19022&elqat=1&elqCampaignId=9673&elqcst=272&elqcsid=42&elqak=8AF5AE0215CE6CCBFCBD80DEAAF6E65192546CB68A2F1D13234E93CAABE059D56EA5/1/010001a0d9fed1e8-36ec4619-3ffc-45eb-86ff-3fe43b866982-000000/VKU9TkihZt5tiX4QyFTn1H0LNIoIwnBlHFqXiJkfrRw=452