Overview

overview

10

Static

static

1

RV_ Audien...f..eml

windows10-2004-x64

1

RV_ Audien...f..eml

windows11-ltsc_2024-x64

1

desarchivo....xhtml

windows10-2004-x64

10

desarchivo....xhtml

windows11-ltsc_2024-x64

3

email-html-2.html

windows10-2004-x64

3

email-html-2.html

windows11-ltsc_2024-x64

3

email-plain-1.txt

windows10-2004-x64

1

email-plain-1.txt

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    RV_ Audiencia De Control De Legalidad - Oficina_ Juzgado Séptimo (Laboral Del Circuito) – - Ref. Proceso 50001738319920264593100.msg
  • Size 9.6MB
  • Sample260929-qy4rss1erd
  • SHA256 b51270fefe5a60aff177e69cbdb24fe10142f65f683664e3a1f55d227c802031
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • RV_ Audiencia De Control De Legalidad - Oficina_ Juzgado Séptimo (Laboral Del Circuito) – - Ref. Proceso 50001738319920264593100.msg
    .eml 9.6MB
  • desarchivo-2473539_Edicto.xhtml
    6.9MB
  • email-html-2.txt
    .html 14KB
  • email-plain-1.txt
    2KB
  • image.png
    .jpg 42KB

RV_ Audiencia De Control De Legalidad - Oficina_ Juzgado Séptimo (Laboral Del Circuito) – - Ref. Proceso 50001738319920264593100.msg

  • SHA256 b51270fefe5a60aff177e69cbdb24fe10142f65f683664e3a1f55d227c802031
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

In-Reply-To

CAKL8QufKiYzhvFrepLdTYfKRzbqvJBjd9m_829MNr2bks_sZUg@mail.gmail.com

Date

Mon, 28 Sep 2026 21:56:02 +0000

Subject

=?utf-8?B?UlY6IEF1ZGllbmNpYSBEZSBDb250cm9sIERlIExlZ2FsaWRhZCAtIE9maWNp?= =?utf-8?B?bmE6IEp1emdhZG8gU8OpcHRpbW8gKExhYm9yYWwgRGVsIENpcmN1aXRvKSA=?= =?utf-8?B?4oCTIC0gUmVmLiBQcm9jZXNvIDUwMDAxNzM4MzE5OTIwMjY0NTkzMTAw?=

Content-Type

multipart/mixed; boundary="_006_BL3PR12MB6403A02214479F4E06F1B18AB68D2BL3PR12MB6403namp_"

Received

from IA1PR12MB9499.namprd12.prod.outlook.com (::1) by DM6PR12MB4105.namprd12.prod.outlook.com with HTTPS; Mon, 28 Sep 2026 21:56:12 +0000

from BL3PR12MB6403.namprd12.prod.outlook.com (2603:10b6:208:3b3::11) by IA1PR12MB9499.namprd12.prod.outlook.com (2603:10b6:208:595::5) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.451.23; Mon, 28 Sep 2026 21:56:03 +0000

from BL3PR12MB6403.namprd12.prod.outlook.com ([fe80::edf0:eb57:9fae:6102]) by BL3PR12MB6403.namprd12.prod.outlook.com ([fe80::edf0:eb57:9fae:6102%4]) with mapi id 15.21.0451.022; Mon, 28 Sep 2026 21:56:03 +0000

Message-Id

<BL3PR12MB6403A02214479F4E06F1B18AB68D2@BL3PR12MB6403.namprd12.prod.outlook.com>

Extracted URLs

  • file https://aka.ms/LearnAboutSenderIdentification

  • file https://ci3.googleusercontent.com/mail-sig/AIorK4zdSC1oLhakjhas6OtnlDXV7ywQAIPSSuMctZ5SbX0Y7e5zHR9Ap7SWexiFMtXRrJCu5nZVmfk]

  • file https://nam02.safelinks.protection.outlook.com/?url=

  • file https://www.proteccion.com/contenidos/personas/