Overview

overview

3

Static

static

3

TR DIPTYQU...NT.msg

windows10-2004-x64

3

TR DIPTYQU...NT.msg

windows11-ltsc_2024-x64

1

PHARMABEAU...26.pdf

windows10-2004-x64

3

PHARMABEAU...26.pdf

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    TR DIPTYQUE DETAILS DE VIREMENT.msg
  • Size 157KB
  • Sample260929-qzcppssz8r
  • SHA256 4d0a14001880d4108d9b65b1a62b9b7adab6b9b353cc5979fde2ee888c820082
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
pdflink

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

    pdflink

File Explorer

  • TR DIPTYQUE DETAILS DE VIREMENT.msg
    .msg 157KB
  • PHARMABEAUTYGROUP-VIR26-00454_290926.PDF
    .pdf 69KB

TR DIPTYQUE DETAILS DE VIREMENT.msg

  • SHA256 4d0a14001880d4108d9b65b1a62b9b7adab6b9b353cc5979fde2ee888c820082
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

In-Reply-To

PATP264MB745131EAF90D15C4348D1848DF8C2@PATP264MB7451.FRAP264.PROD.OUTLOOK.COM

Return-Path

[email protected]

Date

Tue, 29 Sep 2026 13:39:28 +0000

Subject

=?Windows-1252?Q?TR:_DIPTYQUE_=96_DETAILS_DE_VIREMENT?=

Content-Type

application/ms-tnef; name="winmail.dat"

Received

from PAZP264MB2927.FRAP264.PROD.OUTLOOK.COM (2603:10a6:102:1f6::8) by PATP264MB5112.FRAP264.PROD.OUTLOOK.COM with HTTPS; Tue, 29 Sep 2026 13:39:30 +0000

from PATP264MB7451.FRAP264.PROD.OUTLOOK.COM (2603:10a6:102:592::9) by PAZP264MB2927.FRAP264.PROD.OUTLOOK.COM (2603:10a6:102:1f6::8) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.451.24; Tue, 29 Sep 2026 13:39:28 +0000

from PATP264MB7451.FRAP264.PROD.OUTLOOK.COM ([fe80::d204:fd58:d687:3282]) by PATP264MB7451.FRAP264.PROD.OUTLOOK.COM ([fe80::d204:fd58:d687:3282%5]) with mapi id 15.21.0451.022; Tue, 29 Sep 2026 13:39:28 +0000

Message-Id

<PATP264MB7451573EB9B148E6A8B4A846DF8C2@PATP264MB7451.FRAP264.PROD.OUTLOOK.COM>

Extracted URLs

  • file http://diptyqueparis.com

  • file http://p-b-group.com

  • file http://www.p-b-group.com/

  • file https://aka.ms/LearnAboutSenderIdentification