attachment20260930-1253-ptgxai.zip
- SHA256 f118fae4ff6d33dc6855b9ed8c6537db604cbb945b1a0bbc1ab1e2d408eed0cc
Static task
static1
General
- Target attachment20260930-1253-ptgxai.zip
- Size 2KB
- Sample260930-kfbqeasepf
- SHA256 f118fae4ff6d33dc6855b9ed8c6537db604cbb945b1a0bbc1ab1e2d408eed0cc
- MD5 8c2a033c2852fd32e2795f4b3c11bcd2
- SHA1 e20c6985690f89390b8cc25165f4dc8322ef5558
- SHA512 176347c6277b6f40f66e8469df9af6b2afab02e8e23d4f967e5a9dcd7bbe31934bb208a6a47c5c8ef28400a6e8d765ca0bee3d434fa4523fdd1a13ec6c734f90
- TLSH T1A3411AD9C8E64276ACBF37AA1637D18D490A2DF54D930E6814DD6C1215CA6773F0384E
- MD5 SHA1 SHA512 TLSH
Score
1/10
Malware Config
Signatures
File Explorer
-
attachment20260930-1253-ptgxai.zip.zip 2KB
-
gideon_algernon_mantell_1762541721.eml.eml 4KB
-
attachment-2.eml 428B
-
email-plain-1.txt109B
-
attachment-3.eml 47B
-
email-plain-1.txt107B
gideon_algernon_mantell_1762541721.eml
- SHA256 997d01af00016e435f92837f7ab9fe498ec666a623b578e3ae5365a16ec4bea5
- MD5 71ce9426d422606d9df78751a1bb92a2
- SHA1 29b55aaf1858affb0d24304d2d1d1996d25bf397
- SHA512 bd161ca2f4a793b933fc17d44bc8961387facd36d33564eb7441ef0e86d5c031e1003810fdc920eeac5479ac3f8468858ab45676b63a8fd4262a8da17e169f38
- SSDEEP 48:0vuRuoAR39o/oDDy5Coi1phNLjku6XqQ2uQ+B6SQW27WSHjYzmoHpAyI6X1j1r/8:iuReR3SAqmQXqQ2O6oA2DpHihPcrF0am
- TLSH T15981F9F2C4298850BE58A67E0832B60272E274CBE1DFE1443628CEF50386A5157B96DB
- MD5 SHA1 SHA512 SSDEEP TLSH
Email Headers
From
Date
Fri, 7 Nov 2025 18:55:22 +0000
Subject
gideon_algernon_mantell-1762541721
Content-Type
multipart/mixed; boundary="_003_690e4099c5b631da4c3d84d3MXLAGIL10345JVDmail_"
Received
from SJ0PR05MB9998.namprd05.prod.outlook.com (2603:10b6:a03:448::22) by DS2PR05MB998328.namprd05.prod.outlook.com with HTTPS; Fri, 7 Nov 2025 18:55:26 +0000
from LV5PR05MB998298.namprd05.prod.outlook.com (2603:10b6:408:35f::17) by SJ0PR05MB9998.namprd05.prod.outlook.com (2603:10b6:a03:448::22) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9298.13; Fri, 7 Nov 2025 18:55:23 +0000
from LV5PR05MB998298.namprd05.prod.outlook.com ([fe80::1046:ee0e:a674:ca2b]) by LV5PR05MB998298.namprd05.prod.outlook.com ([fe80::1046:ee0e:a674:ca2b%5]) with mapi id 15.20.9298.010; Fri, 7 Nov 2025 18:55:23 +0000
Message-Id
Extracted URLs
-
file https://on_tap.lethal_agent.com
attachment-2
- SHA256 18a62e8e9ea13251f61ccf787aeea4e4d0539f456cf2c9f762f06145a885146d
- MD5 003dcc61180ea7ac78d9552f1ebd070d
- SHA1 309dc9cf0a53747c1bbf2b4f2c294e983fd60664
- SHA512 fc1040455c10958c89dce0828defd462ccb8fccef0942870c157ba28cf4bf15f25e73a7fe3818f194649db57339e3af46f8978b0ae0d02a1a25108e1e77fe1ed
- TLSH T131E0A391CF01BC19835D93885676F50EB1A51553F1CFE90C318DD1D7078AA0A41F51E7
- MD5 SHA1 SHA512 TLSH
Email Headers
From
Date
Fri, 7 Nov 2025 12:55:21 -0600
Subject
gideon_algernon_mantell-1762541721
Content-Type
text/plain; charset="UTF-8"
Message-Id
Extracted URLs
-
file https://on_tap.lethal_agent.com
email-plain-1.txt
- SHA256 5c315f38e5bd3454ff9dfb386720a0612b86bc7524581c5737164c4be6d4ade6
- MD5 c9af0d1573d9f75288e2f0b8ab3629f3
- SHA1 a4d5a1546f8396b785904ea6f8c2e8758a241d8e
- SHA512 755e129c69718dc49908728f51f0e8e31d21bf978fb27f21a16752caaf506a2541fad252c6d61bc1dbe95ba1de879592de5dc642684745ac3bba83563069896a
- TLSH T15BB092B343A1BEBED32C0280920669E9B2672403B4AA8968A08A4006030192452F21AE
- MD5 SHA1 SHA512 TLSH
attachment-3
- SHA256 75b3b02b738aa41769624159531f856ebf5f972417b8d868ae26e4af8a25603f
- MD5 d017ce8242b3cfcb2b1cc2b2881f6095
- SHA1 0469e1b4ac1335e30aa91dc451515b7371b777b7
- SHA512 b5b9078f84427d96baedba4f152a99a3e2b1d79973fb8565b56fdac88b5ca75122abb74e5c5506e3475ebd8dbdea56578ddf694c13a2421976ed9454b366e015
- MD5 SHA1 SHA512
Email Headers
Content-Type
text/plain
email-plain-1.txt
- SHA256 89766f4ab2c0fa50c7bc69081d13e26151441751d6bff58c0851c52861a7a1aa
- MD5 c84c43a098e337358a94bf4dfcada063
- SHA1 ec29455b096f8139d3a6a30f3a74ddde6167109a
- SHA512 255e8e8c552994fd9bd72336196d4b8979bdad8cc103e880d0ab71736da7c9c23adef19017d5db127519964b2fe35c800c25eb85d734a9a92e6aff77f565a1f3
- TLSH T147B092A34360BEBED32C0280920669E9B2662403B4AA8868908A4006030192452F21AE
- MD5 SHA1 SHA512 TLSH