attachment20260930-527357-xohq6k.zip
- SHA256 98fb16aece6ccfd4475f371ae0a50ce5a47c2988e1c4255cf8e66e31e3aca95e
Static task
static1
General
- Target attachment20260930-527357-xohq6k.zip
- Size 9KB
- Sample260930-3jf4eavzcv
- SHA256 98fb16aece6ccfd4475f371ae0a50ce5a47c2988e1c4255cf8e66e31e3aca95e
- MD5 29d62bca841d6531f22151494dca96c4
- SHA1 027d9559ff0fc7ed7629c6f911e86f5bfbd98645
- SHA512 0144a56b73bd417c83ed9a59ab5c354c34f375c02ecdc189a21fed224631a7c0a5505e60dbaaf557c359bef2d7e099f77b9665b109fa7acac4bb4ec3e38ec507
- SSDEEP 192:UMf/GnwGbbrH8qgE3D0HILAJ8QlSMra2WH0GXHirGhGqk0woE:UMXGnDTHgALjQrtW7XHHGqkbB
- TLSH T11B12C06E89FBC8C5CE3C2BAE60F278E5718B721D5F0C176722E120AFC3F45999800248
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
File Explorer
-
attachment20260930-527357-xohq6k.zip.zip 9KB
-
Planned_Maintenance_Server_Downtime_Notification_11_02_.eml.eml 20KB
-
email-html-2.txt.html 2KB
-
email-plain-1.txt557B
Planned_Maintenance_Server_Downtime_Notification_11_02_.eml
- SHA256 358f69c5045978e8b003b958eb2e1a7c01b033ee3b1e683c83871e27da8d00f2
- MD5 2ce82952fcbc01e64b580a6f00560f22
- SHA1 8636bc71d15703d0f4bd20b0ab22cdedeba1c37d
- SHA512 844a79979b09da43a818839b80a7adfa4fe15c4b25758235ae230769b00da0673dff9592cdb86f46384fa975cac86d4b090b3ddcaaca8b1388e849689972ad38
- SSDEEP 384:AU0fcfqSNjalUKSdWqbhTjYZqsN/sOBq2N/1SNz6HxrcxyOA892wRuEafm+GGaDH:AU0fcfqSNjalUKSdWqbhTUZqsN/sOBqP
- TLSH T12E923B02DF6D4021D2D3A1B8BD12FC0E53902EA8F3FBB19134B4A5A749EF4D5CA6B549
- MD5 SHA1 SHA512 SSDEEP TLSH
Email Headers
From
Return-Path
Date
Fri, 31 Oct 2025 17:49:21 +0000
Subject
Planned Maintenance: Server Downtime Notification (11/02)
Content-Type
multipart/alternative; boundary="_000_PH0PR11MB56435DAE9F0EF61D235B2AB7B4F8APH0PR11MB5643namp_"
Received
from SN7PR05MB7632.namprd05.prod.outlook.com (2603:10b6:806:10f::20) by DS2PR05MB998328.namprd05.prod.outlook.com with HTTPS; Fri, 31 Oct 2025 17:49:28 +0000
from SJ0PR13CA0073.namprd13.prod.outlook.com (2603:10b6:a03:2c4::18) by SN7PR05MB7632.namprd05.prod.outlook.com (2603:10b6:806:10f::20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9275.14; Fri, 31 Oct 2025 17:49:25 +0000
from SJ5PEPF000001EC.namprd05.prod.outlook.com (2603:10b6:a03:2c4:cafe::91) by SJ0PR13CA0073.outlook.office365.com (2603:10b6:a03:2c4::18) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.20.9298.5 via Frontend Transport; Fri, 31 Oct 2025 17:49:25 +0000
from BL0PR03CU003.outbound.protection.outlook.com (2a01:111:f403:c101::7) by SJ5PEPF000001EC.mail.protection.outlook.com (2603:10b6:a0f:fc02::1c8) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.20.9275.10 via Frontend Transport; Fri, 31 Oct 2025 17:49:24 +0000
from PH0PR11MB5643.namprd11.prod.outlook.com (2603:10b6:510:d5::21) by PH0PR11MB4792.namprd11.prod.outlook.com (2603:10b6:510:32::11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9275.15; Fri, 31 Oct 2025 17:49:21 +0000
from PH0PR11MB5643.namprd11.prod.outlook.com ([fe80::f783:a54c:8159:7678]) by PH0PR11MB5643.namprd11.prod.outlook.com ([fe80::f783:a54c:8159:7678%4]) with mapi id 15.20.9275.013; Fri, 31 Oct 2025 17:49:21 +0000
Received-Spf
Pass (protection.outlook.com: domain of cofense.com designates 2a01:111:f403:c101::7 as permitted sender) receiver=protection.outlook.com; client-ip=2a01:111:f403:c101::7; helo=BL0PR03CU003.outbound.protection.outlook.com; pr=C
Message-Id
<PH0PR11MB56435DAE9F0EF61D235B2AB7B4F8A@PH0PR11MB5643.namprd11.prod.outlook.com>
Extracted URLs
-
file https://www.infinitum-systems.com/status
email-html-2.txt
- SHA256 48b5c244a03aac7e1f973a6448ba316bf78b7a325d175419449c695c1793875e
- MD5 2813f8fa6ea46aed22df050b10a39f4a
- SHA1 c90c8bafb72b30098b2e826437acfe00e9ac2f46
- SHA512 3863511943a067c68dc0bbd872abd99bd27b809fe99200539921286a44e63c3f630a7cf3c254fdd1c251bf021fa3deeecb66823e321734d601dc995271068212
- TLSH T1BC51DE07B341010B53DB6A38F593FB877ACA96D48247546734B0610BDCDED26A2E3A8C
- MD5 SHA1 SHA512 TLSH
email-plain-1.txt
- SHA256 53cd40067bf09936554bd04c89f0518369e72092091bfdbdb500331ad716341f
- MD5 505d94850c3880bb65f9fcfa1979c66a
- SHA1 555d971f1930a5a5a034d43960b362c3355dadd2
- SHA512 14f38de7f66dc92d6f2d6d3c5265d0d0157628be0f2287f6f732e1cc68547826cf1ecb418ae70c705d93980371faabfde34cbede628e1721a8d2383d4eb48438
- TLSH T177F0E10AABCA40171B69418478AC6650ED76A430D363404824E4004A4381CC6D3BFC6A
- MD5 SHA1 SHA512 TLSH