Overview

overview

4

Static

static

1

mail EXTER...vo.msg

windows10-2004-x64

4

mail EXTER...vo.msg

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    mail EXTERNO Completar su expediente administrativo.msg
  • Size 59KB
  • Sample260930-k6gdksss3n
  • SHA256 d3326963e6ea2e54b8f956d7b477c6463cecfa1bee0e4a6acfbc669836a8231e
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • mail EXTERNO Completar su expediente administrativo.msg
    .msg 59KB

mail EXTERNO Completar su expediente administrativo.msg

  • SHA256 d3326963e6ea2e54b8f956d7b477c6463cecfa1bee0e4a6acfbc669836a8231e
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Date

Tue, 29 Sep 2026 13:00:45 +0000

Subject

[mail EXTERNO] Completar su expediente administrativo

Content-Type

multipart/alternative; boundary="_000_010201a0ed40db665aeccf3cfbb94ca2b66a64754afd9d5a000000e_"

Received

from GVXPR10MB5815.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:150:6b::5) by GV1PR10MB5820.EURPRD10.PROD.OUTLOOK.COM with HTTPS; Tue, 29 Sep 2026 13:01:06 +0000

from AS9PR06CA0540.eurprd06.prod.outlook.com (2603:10a6:20b:49d::32) by GVXPR10MB5815.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:150:6b::5) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.451.24; Tue, 29 Sep 2026 13:01:02 +0000

from AM2PEPF00070CF8.eurprd02.prod.outlook.com (2603:10a6:20b:49d:cafe::81) by AS9PR06CA0540.outlook.office365.com (2603:10a6:20b:49d::32) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.451.24 via Frontend Transport; Tue, 29 Sep 2026 13:01:02 +0000

from fortimail.grupoabeirar.com (77.26.73.201) by AM2PEPF00070CF8.mail.protection.outlook.com (10.167.242.10) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.472.14 via Frontend Transport; Tue, 29 Sep 2026 13:01:02 +0000

from a3-5.smtp-out.eu-west-1.amazonses.com (a3-5.smtp-out.eu-west-1.amazonses.com [54.240.3.5]) by fortimail.grupoabeirar.com with ESMTPS id 68TD0kEM004574-68TD0kEO004574 (version=TLSv1.3 cipher=TLS_AES_256_GCM_SHA384 bits=256 verify=NO) for <[email protected]>; Tue, 29 Sep 2026 15:00:46 +0200

Received-Spf

Fail (protection.outlook.com: domain of mails.aprovall.com does not designate 77.26.73.201 as permitted sender) receiver=protection.outlook.com; client-ip=77.26.73.201; helo=fortimail.grupoabeirar.com;

Message-Id

<010201a0ed40db66-5aeccf3c-fbb9-4ca2-b66a-64754afd9d5a-000000@eu-west-1.amazonses.com>

Extracted URLs

  • file http://.es-m-fw.es

  • file http://.es-menu.es

  • file http://a.es

  • file http://button.es

  • file http://table.es

  • file http://td.es

  • file http://tr.es

  • file http://tubasys.com

  • file https://portal.aprovall.com/en/aprovall-portal-documentation/

  • Show all