Overview

overview

3

Static

static

1

IMG_E3961.pdf

windows10-2004-x64

3

IMG_E3961.pdf

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    phish_alert_sp2_2.0.0.0 (21).eml
  • Size 210KB
  • Sample260929-stps7awsav
  • SHA256 82f0f8917947da2eb108418d74d7f46511777fa733e49472dc3e8c1c05fb12d9
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • phish_alert_sp2_2.0.0.0 (21).eml
    .eml 210KB
  • IMG_E3961.pdf
    .pdf 143KB

phish_alert_sp2_2.0.0.0 (21).eml

  • SHA256 82f0f8917947da2eb108418d74d7f46511777fa733e49472dc3e8c1c05fb12d9
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

[email protected]

Date

Tue, 29 Sep 2026 15:02:32 +0000

Subject

=?UTF-8?B?WW91ciB0aW1lLXN0YW1wZWQgYnV5IHZvdWNoZXIgaGFzIGFycml2?= =?UTF-8?B?ZWQgWzIwMjYwOS1FNDJGXSAg?=

Content-Type

multipart/mixed; boundary="----sinikael-?=_1-17906942728460.4389941820923642"

Received

from SACPR03MB886626.namprd03.prod.outlook.com (2603:10b6:806:541::17) by DS7PR03MB5541.namprd03.prod.outlook.com with HTTPS; Tue, 29 Sep 2026 15:02:40 +0000

from CH2PR16CA0025.namprd16.prod.outlook.com (2603:10b6:610:50::35) by SACPR03MB886626.namprd03.prod.outlook.com (2603:10b6:806:541::17) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.451.18; Tue, 29 Sep 2026 15:02:38 +0000

from LV8PEPF00000067.namprd03.prod.outlook.com (2603:10b6:610:50:cafe::4a) by CH2PR16CA0025.outlook.office365.com (2603:10b6:610:50::35) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.472.15 via Frontend Transport; Tue, 29 Sep 2026 15:02:37 +0000

from DU2PR03CU002.outbound.protection.outlook.com (2a01:111:f403:d200::1) by LV8PEPF00000067.mail.protection.outlook.com (2603:10b6:40f:fc02::4e7) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.472.14 via Frontend Transport; Tue, 29 Sep 2026 15:02:36 +0000

from PR3P195MB0522.EURP195.PROD.OUTLOOK.COM (2603:10a6:102:3e::15) by DB4P195MB2692.EURP195.PROD.OUTLOOK.COM (2603:10a6:10:5e3::11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.451.24; Tue, 29 Sep 2026 15:02:32 +0000

from PR3P195MB0522.EURP195.PROD.OUTLOOK.COM ([fe80::2adb:3ee1:68f2:873a]) by PR3P195MB0522.EURP195.PROD.OUTLOOK.COM ([fe80::2adb:3ee1:68f2:873a%4]) with mapi id 15.21.0451.022; Tue, 29 Sep 2026 15:02:32 +0000

Received-Spf

Pass (protection.outlook.com: domain of hotmail.com designates 2a01:111:f403:d200::1 as permitted sender) receiver=protection.outlook.com; client-ip=2a01:111:f403:d200::1; helo=DU2PR03CU002.outbound.protection.outlook.com; pr=C

Message-Id

<PR3P195MB0522ED806A20F4D855995DC9A68C2@PR3P195MB0522.EURP195.PROD.OUTLOOK.COM>