Resubmissions

28/09/2026, 21:58

260928-1vzzjsvbph3

28/09/2026, 21:55

260928-1svl2sv15r3

General

  • Target
    Message.eml
  • Size 76KB
  • Sample260928-1vzzjsvbph
  • SHA256 de85224508f65a05bc6dd48d055a99924ad4a552584144f057736e8d26f45558
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • Message.eml
    .eml 76KB
  • EHIAF4FWBG4RKV2G.pdf
    .pdf 45KB
  • email-html-2.txt
    107B
  • email-plain-1.txt
    40B

Message.eml

  • SHA256 de85224508f65a05bc6dd48d055a99924ad4a552584144f057736e8d26f45558
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

[email protected]

Date

Mon, 28 Sep 2026 09:53:27 -0700

Subject

The invoice 614PM_2026_IDFA is enclosed for your records.

Content-Type

multipart/mixed; boundary="000000000000c7ec1a065c8de772"

Received

from BLAPR03CA0095.namprd03.prod.outlook.com (2603:10b6:208:32a::10) by CH3PR13MB6970.namprd13.prod.outlook.com (2603:10b6:610:205::22) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.451.24; Mon, 28 Sep 2026 16:53:31 +0000

from BN3PEPF0000B076.namprd04.prod.outlook.com (2603:10b6:208:32a:cafe::38) by BLAPR03CA0095.outlook.office365.com (2603:10b6:208:32a::10) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.451.24 via Frontend Transport; Mon, 28 Sep 2026 16:53:30 +0000

from mail-dy2-f43.google.com (74.125.229.43) by BN3PEPF0000B076.mail.protection.outlook.com (10.167.243.121) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.472.14 via Frontend Transport; Mon, 28 Sep 2026 16:53:30 +0000

by mail-dy2-f43.google.com with SMTP id 5a478bee46e88-33c24422d4dso3841747eec.2 for <[email protected]>; Mon, 28 Sep 2026 09:53:30 -0700 (PDT)

from 1099214434215 named unknown by gmailapi.google.com with HTTPREST; Mon, 28 Sep 2026 09:53:27 -0700

from 1099214434215 named unknown by gmailapi.google.com with HTTPREST; Mon, 28 Sep 2026 09:53:27 -0700

X-Received

by 2002:a05:7300:16a8:b0:341:4466:1cd2 with SMTP id 5a478bee46e88-34271d8bc23mr9557191eec.20.1790614408977; Mon, 28 Sep 2026 09:53:28 -0700 (PDT)

Received-Spf

Pass (protection.outlook.com: domain of gmail.com designates 74.125.229.43 as permitted sender) receiver=protection.outlook.com; client-ip=74.125.229.43; helo=mail-dy2-f43.google.com; pr=C

Message-Id

<CAGjE+[email protected]>