attachment20260930-1253-nl2rpx.zip
- SHA256 a811851a525c676d6893c804437e43718923f4dcc6d4deab6dad618490ca7a79
Static task
static1
General
- Target attachment20260930-1253-nl2rpx.zip
- Size 2KB
- Sample260930-ml7fdaxxes
- SHA256 a811851a525c676d6893c804437e43718923f4dcc6d4deab6dad618490ca7a79
- MD5 4d8210da063735ff90381a8627eec2fd
- SHA1 24e6cfee31faa32f21d17eb42bc99ca1b06137fb
- SHA512 e06888076a421e72a053f31e41bfd155cdcbe1c109064786fb1f682cc34eee8610766e074e6ae2f8ec762a66c367dd6cac3f670d10c5c31d8e752eaa7494c1ec
- TLSH T19E411CD4E29C8A40D0FF55B481B49CD58F4B12758787261AD399F4070FB113BAEE26D3
- MD5 SHA1 SHA512 TLSH
Score
1/10
Malware Config
Signatures
File Explorer
-
attachment20260930-1253-nl2rpx.zip.zip 2KB
-
hank_panky_1762533003.eml.eml 3KB
-
attachment-2.eml 405B
-
email-plain-1.txt99B
-
attachment-3.eml 47B
-
email-plain-1.txt97B
hank_panky_1762533003.eml
- SHA256 9a55373268881e45ec62a57da90337d0a541d532095d209020759cdbf9a3f3d7
- MD5 75e76d590af939253c24387db32a6883
- SHA1 20e9152eca285c7bb3e6de5564feeb7d4346668d
- SHA512 fec38e41eaa1d9a671cbfcfdb9a1a238455abfa6a6286643d99a447fb8727cfb18e99c0b86f3415f96523f808c1aaddc47648f07cef24639a0dfad2d4a9f5515
- TLSH T1EC81B4A2CC3A44702ED4F7BA2171F506A7E2358EE5EAE1C43404FDA80289754A6EF586
- MD5 SHA1 SHA512 TLSH
Email Headers
From
Date
Fri, 7 Nov 2025 16:30:04 +0000
Subject
hank_panky-1762533003
Content-Type
multipart/mixed; boundary="_003_690e1e8b3985c1bfb03d8472MXLAGIL10345JVDmail_"
Received
from PH0PR05MB8917.namprd05.prod.outlook.com (2603:10b6:510:d8::16) by DS2PR05MB998328.namprd05.prod.outlook.com with HTTPS; Fri, 7 Nov 2025 16:30:07 +0000
from LV5PR05MB998298.namprd05.prod.outlook.com (2603:10b6:408:35f::17) by PH0PR05MB8917.namprd05.prod.outlook.com (2603:10b6:510:d8::16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9298.13; Fri, 7 Nov 2025 16:30:04 +0000
from LV5PR05MB998298.namprd05.prod.outlook.com ([fe80::1046:ee0e:a674:ca2b]) by LV5PR05MB998298.namprd05.prod.outlook.com ([fe80::1046:ee0e:a674:ca2b%5]) with mapi id 15.20.9298.010; Fri, 7 Nov 2025 16:30:04 +0000
Message-Id
Extracted URLs
-
file https://dopy.pinus_jeffreyi.com
attachment-2
- SHA256 a576f278d0d5347eb4b4442945c5ff242b3b7392cb937e51bc102c8238cc1f41
- MD5 24c36154b6805c8cffaeffae7e3ce86c
- SHA1 a005c0ac3ca0ebb8c1243c5579bb9506a4af09bc
- SHA512 17ffc3e9fa723e39a3baac2eda7083e9a10d5783e26850c71869790b0f291b1f3320fc46e4ca41872c6286c6875f0b564673711dfe6c50fc040cb79f352b0712
- TLSH T128E0FA80DD035424059CD7A07175F74DF19A1757F1CBFB1C3104B0551355B85C1D40C5
- MD5 SHA1 SHA512 TLSH
Email Headers
From
Date
Fri, 7 Nov 2025 10:30:03 -0600
Subject
hank_panky-1762533003
Content-Type
text/plain; charset="UTF-8"
Message-Id
Extracted URLs
-
file https://dopy.pinus_jeffreyi.com
email-plain-1.txt
- SHA256 ff160a0f00f8d0103b9c925b7f43d23446d259a69596e65bbdcad529e7a319b2
- MD5 7860e42eb31539623b17ac6a64b332f7
- SHA1 574ca2058d0eec991d04b158694b47ccf1fa73a1
- SHA512 ea9efc39e996a6ea94485732ca7771d94f7db4d856bb1d68df61c42f34761c181db1ae4c4fd0d89246c3397e86192985a2eac8901072b913d44ab6ebbc003111
- TLSH T136B0129358826A3B417C99616344F3C1A327551C64E56E7CF21450201931A20C3E20CD
- MD5 SHA1 SHA512 TLSH
attachment-3
- SHA256 75b3b02b738aa41769624159531f856ebf5f972417b8d868ae26e4af8a25603f
- MD5 d017ce8242b3cfcb2b1cc2b2881f6095
- SHA1 0469e1b4ac1335e30aa91dc451515b7371b777b7
- SHA512 b5b9078f84427d96baedba4f152a99a3e2b1d79973fb8565b56fdac88b5ca75122abb74e5c5506e3475ebd8dbdea56578ddf694c13a2421976ed9454b366e015
- MD5 SHA1 SHA512
Email Headers
Content-Type
text/plain
email-plain-1.txt
- SHA256 c78091de0da79ba7313751b31f29dccf5d1582ed1fb36b4e4262cdec9677534c
- MD5 9d9ff2e25969304f3f675f26134fa797
- SHA1 2ec44527d8974a43c4d32ad31962288b12bc2b62
- SHA512 2adfea9a594c6dbe2ae701e7b25563d875f9d30897d08433be8e548e53d341d6420558d7a7e4505a9ef582610222b1c92392cc957bed6d583717a9e42c3dbb4d
- TLSH T111B0128358406A3B417C99616344F3C19326551C64E56D7CF21450201931A20C3E20CD
- MD5 SHA1 SHA512 TLSH