Overview

overview

4

Static

static

1

17th Globa...rs.msg

windows10-2004-x64

4

17th Globa...rs.msg

windows11-ltsc_2024-x64

1

Resubmissions

30/09/2026, 14:53

260930-r9kzhatxhy4

30/09/2026, 11:49

260930-ny8dwavfkh4

Sharing

Copy URL Twitter E-mail

General

  • Target
    17th Global EA Summit Upcoming Webinars.msg
  • Size 104KB
  • Sample260930-ny8dwavfkh
  • SHA256 c3da35d6ac6905502694c160fdade314b46de8f05c92c260b2a6fc9d826fdc07
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • 17th Global EA Summit Upcoming Webinars.msg
    .msg 104KB

17th Global EA Summit Upcoming Webinars.msg

  • SHA256 c3da35d6ac6905502694c160fdade314b46de8f05c92c260b2a6fc9d826fdc07
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

bounce+117f6f.a0bd59-roselyne.lefrancois=aviation-civile.gouv.fr@vonlanthenevents.email

Date

Mon, 28 Sep 2026 11:36:47 +0000

Subject

17th Global EA Summit & Upcoming Webinars

Content-Type

text/html; charset="utf-8"

Received

from PAZP264MB3303.FRAP264.PROD.OUTLOOK.COM (2603:10a6:102:141::12) by PASP264MB5775.FRAP264.PROD.OUTLOOK.COM with HTTPS; Mon, 28 Sep 2026 11:47:08 +0000

from PA7P264CA0049.FRAP264.PROD.OUTLOOK.COM (2603:10a6:102:34a::7) by PAZP264MB3303.FRAP264.PROD.OUTLOOK.COM (2603:10a6:102:141::12) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.451.23; Mon, 28 Sep 2026 11:47:07 +0000

from PA2PEPF00019232.FRAP264.PROD.OUTLOOK.COM (2603:10a6:102:34a:cafe::a2) by PA7P264CA0049.outlook.office365.com (2603:10a6:102:34a::7) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.451.24 via Frontend Transport; Mon, 28 Sep 2026 11:47:07 +0000

from a-vga-rvega-3-x.dc.aviation (143.196.159.101) by PA2PEPF00019232.mail.protection.outlook.com (10.167.242.38) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.472.14 via Frontend Transport; Mon, 28 Sep 2026 11:47:06 +0000

from relais3.lfpo.aviation-civile.gouv.fr (unknown [172.16.249.219]) by a-vga-rvega-3-x.dc.aviation (Relais VEGA PROD (Postfix)) with UTF8SMTPS id B5DD420009 for <[email protected]>; Mon, 28 Sep 2026 13:47:06 +0200 (CEST)

from localhost (localhost [127.0.0.1]) by relais3.lfpo.aviation-civile.gouv.fr (Postfix) with UTF8SMTP id B0AD9180026 for <[email protected]>; Mon, 28 Sep 2026 13:47:06 +0200 (CEST)

from relais3.lfpo.aviation-civile.gouv.fr ([127.0.0.1]) by localhost (relais3.lfpo.aviation [127.0.0.1]) (amavisd-new, port 10024) with UTF8SMTP id lY856qr6H2K8 for <[email protected]>; Mon, 28 Sep 2026 13:47:02 +0200 (CEST)

from a62.a4f4f9e9.euw1.send.eu.mailgun.net (a62.a4f4f9e9.euw1.send.eu.mailgun.net [198.244.63.62]) by relais3.lfpo.aviation-civile.gouv.fr (Postfix) with UTF8SMTPS id DF596180027 for <[email protected]>; Mon, 28 Sep 2026 13:47:02 +0200 (CEST)

by 0411f86fe00db2d628e61924b61253a323715d2af45e416888bb1e5d98e256d2 with HTTP id 6aba515b6196c52c992aeb77; Mon, 28 Sep 2026 11:36:47 GMT

Received-Spf

Pass (protection.outlook.com: domain of vonlanthenevents.email designates 198.244.63.62 as permitted sender) receiver=protection.outlook.com; client-ip=198.244.63.62; helo=a62.a4f4f9e9.euw1.send.eu.mailgun.net; pr=C

Message-Id

<[email protected]>

Extracted URLs

  • file http://vonlanthenevents.email

  • file https://brochure.vonlanthenevents.com/17th-Global-Executive-Assistant-Summit.pdf

  • file https://email.vonlanthenevents.email/c/eJxsjDFuxCAQAF9jOlvL2gZTUFyRywPygNParM9IGE6AUfL7KFWKpJzRaJwlWN1sBFupDcxGAaI4LEqltYNp1BMBLExmVtNu9Dy71alxEd4ioAKDi5SjmvSgdtR6M4ty66gkcTdBSzFQrAdHbhxrGfgkH0SwR62v0o23Du8d3tectuPKPPzpt3R2eJe6Hv17SCuF_u2Tt6v6xv2tFF8qxdp_XOfp6_Byuwi-VPu76X9YnBZxhsXAKLLNqXD4ijwE3jPFLfnSTUDNU_Up9ptvPvDwTFcb9iyqlZrplel58QPwAaMUlZ7_2GbxOwAA__-DP2vM

  • file https://email.vonlanthenevents.email/c/eJxsjMFuhCAQQL8GbhoYFeTAoRd_YzOLo5IgbGRk279veuqhPb6Xl7d6VM91cpK8tk5NzigAeXgzbutsnKaAuBqrFYJzA0zbPDkTnJXRgwKjHMxaD2a0vdnA2uBmsz4Ho5HEqFrJCTMflKlR5trTiTHJ5A_mVxXDh4BFwPJ-v_s_aSingIWygEVbPro9lSemjj4p3BwbdVhrrIyZu3qfZ2SZYmX_--l-WJ4eYFKzU4O8_FUqpa9MfaLtwhxKrGJU2CJyLLkLscVE_V7u1m-XZK8t4evC_aaHgocatGTc_7HNw3cAAAD__0inasw

  • file https://email.vonlanthenevents.email/o/eJxsyT1uxCAQQOHTLN2iYcD8FJxlNdiDF4mFCGOk3D5KlSble98RCdKxBcFRuQBbsIAo3pEPtrvNiYwPLiufktYp-IxKs2dDokQEtBDQK6WtcdJmdG4P3h5JW0X8MLB6q9TmmxsvbvOS_KFSRS3XjH_2_G3xiYgb-ABajDj6xfW7saycB7W9l-thgFahWXp77mWVyvLs95J5iBmVY_oadN78AnyBVmLS-c9dEX8CAAD__2JDTEk

  • file https://email.vonlanthenevents.email/u/eJxEybFuwyAQANCvMVsQnDGYgaFfEh3mzkGiUAFB6t9XnTI-vRRQxXR48QoM0ZxJ83mlg3fwzOwjKu_MAcTRiRxAgVUeTq13a5y0DM5d_rQp7lYjbUatVgvW-aJKi-ockr4xF1HymOFzj3-LHnobVH4ryULcsV4tj80oXBlnbvVx5ZULybu9l-QuZtjgS0y8g3aEPx3vNz0VPNWuxQrwFwAA__9PkkJC

  • file https://www.vonlanthenevents.email