attachment20260930-527357-o4f5u9.zip
- SHA256 e48fccc431da9627482bcf2d096d8afd80c763e09212140b833307517584986f
Static task
static1
General
- Target attachment20260930-527357-o4f5u9.zip
- Size 6KB
- Sample260930-2v2c2szy8n
- SHA256 e48fccc431da9627482bcf2d096d8afd80c763e09212140b833307517584986f
- MD5 280dbed160369627553d4dc5dc843b8d
- SHA1 1823b8aafd93236c0ec9c25f8ca531aa8fe4a7e0
- SHA512 d7b5e917786e090d79890ff370d4b05951022675ae5b754bdf913f10169b293a5a3ac9938ba363b7bfb3933af7cc454979857e4a536069d5a93e44015e37c7d6
- SSDEEP 192:NpA5Pa/A3nK4nbVj+cD5rRJ8r5UTy6ynjKVp861f+F:Nqi/Ujn5NttJK5U26jV+61GF
- TLSH T1B2D18EEC787AF2F0C57FA2130D1F6ACB52AD6451886905BE7DB098898196F073293787
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
File Explorer
-
attachment20260930-527357-o4f5u9.zip.zip 6KB
-
_KELLIE_POTENTIAL_PHISH_TC_012_Borderless_QR_Code_Detection_Advanced_page_and_search_for_Report_content_QR_code_decodings_contains_Create_Trigger.eml.eml 9KB
-
PhishReport.zip.zip 3KB
-
email-plain-1.txt4KB
_KELLIE_POTENTIAL_PHISH_TC_012_Borderless_QR_Code_Detection_Advanced_page_and_search_for_Report_content_QR_code_decodings_contains_Create_Trigger.eml
- SHA256 98ec4d20219f6a3c3f7f7899a26c71daac11e546e2240ca67f7a4600885883d2
- MD5 136f198ceca7bd1cf635a3b0f231fbf3
- SHA1 3b7297ede577f5dc471c9ca98a0eee9499dc2294
- SHA512 61389c1251320154f88bfa31f957db5926c50ae94a7256d00bebcc1dd5f496b28e722964db2c91efbea0b95eb9ec510f22948dc9e28a4beadc53516a984b1d1b
- SSDEEP 192:Vp3JkCbpw5adQIkNdwVWb1vdMjRY/VDhL9u6V+wdVrLyugG6qSBUFzzb9b1M6m6:/JkCb6eQIswVWb1vdMjRChKaDjwqF/bV
- TLSH T182224CB3D61D54607F91B2E209163800FBFF500FE5CADC70657EA38936848D19BBE99A
- MD5 SHA1 SHA512 SSDEEP TLSH
Email Headers
From
Date
Tue, 10 Feb 2026 18:39:44 +0000
Subject
[KELLIE - POTENTIAL PHISH] TC-012: Borderless QR Code Detection - Advanced page and search for Report content > QR code decodings > contains > Create Trigger
Content-Type
multipart/mixed; boundary="_002_DS2PR05MB9983284356FE78B322FAF838C78962ADS2PR05MB998328_"
Message-Id
<DS2PR05MB9983284356FE78B322FAF838C78962A@DS2PR05MB998328.namprd05.prod.outlook.com>
PhishReport.zip
- SHA256 34d7659440ef648200c183d561043c3a779ddd27554c780d26a8c30265923875
- MD5 2eeca755e1dd1d246c7049172d08cab3
- SHA1 5cf96373ca9dc1a3495fe4ef87f97d2db3737d54
- SHA512 df9ba6e6dfc4eaaff4072fdff91affe0547ad465a51120ea2a910785e7f0958f76a9e5209557b33da5719d1d182a6f3ba93e1caadbc3c4de1352cc8cb898afd4
- TLSH T139615C4969F81A98E37FF7A1381F21621B86515DC1852E45AE488BCD3ACE3C045A644F
- MD5 SHA1 SHA512 TLSH
email-plain-1.txt
- SHA256 302059a97874f2bf05b0905dde04ca4b86a4eadd1cd715657c198788fd2b59bc
- MD5 461992919d0f3e67e5d2138e59f3b141
- SHA1 822ce9ed27eab6878d80978c88d06637be52cbd0
- SHA512 100d34c884a0e7b3b28476e0237b60316a03a9d1e6fd8f7ca1b6b5e34d926a4436f9b8328a631bc36b3dd6ac807ce6b777160d48eac9fc8ea32404f72a04582a
- SSDEEP 96:LrbSGBYV5zORiRiTl6IkJHIQXFuVWbyYiE22dP0jofepvY/Vu:Hbpw5adQIkNdwVWb1vdMjRY/Vu
- TLSH T19481C5B3CE2994703E65F1D604153A04C7FB504FE2C898D03DFEA64827908A59FAE9DA
- MD5 SHA1 SHA512 SSDEEP TLSH