attachment20260930-1253-kmf77w.zip
- SHA256 f6ac2edb28ae0f74029a65ea2002a2f9fe166b33256260520443d41867080dc2
Static task
static1
General
- Target attachment20260930-1253-kmf77w.zip
- Size 9KB
- Sample260930-pellfawgqf
- SHA256 f6ac2edb28ae0f74029a65ea2002a2f9fe166b33256260520443d41867080dc2
- MD5 e27385ce8fe923f0b9277ed00ff0e819
- SHA1 0ae7300f3ee8748828b75d6d1aa91ed8a314f14f
- SHA512 4655b9946179b91cc5b161135fda1710b197742d95a4176bc69675443f5a4d5b736cf8d904f192c4a29e7c673a5461dee6f64ca56d25eeda46632fdc1b31878a
- SSDEEP 192:U0Gplz276n2mlwOfbEc73Xymv4hNGgzWhC9ZfYSPDtwYH:U0EK6n2bOok3iQO44qCkAXH
- TLSH T1D512AF1791367550611B49BA2DE2D6E36F98580AF458ED3E2E8C7B1F4B1CCAF1B23460
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
File Explorer
-
attachment20260930-1253-kmf77w.zip.zip 9KB
-
Action_Required_Update_Your_Company_Contact_Information.eml.eml 20KB
-
email-html-2.txt.html 2KB
-
email-plain-1.txt537B
Action_Required_Update_Your_Company_Contact_Information.eml
- SHA256 f52fe7fe1fedbf331136c5c7c85f30a2115c33cdea3c6e84e1eddc0351a8fa9e
- MD5 a56baaa9af349b168b9545a0fc8c3d73
- SHA1 c52fa4473e106798ad8e985361be47ced86a6787
- SHA512 a719cd944fa64edc058effa6b6abb959838267a194a392435cb445767630c69d8549aff2133006f70c8f540a2b108616003b75a0316bebb5716924c918a85d9f
- SSDEEP 384:P6GuUfqSNjayCSdWq9VE2ZqsNWs/sUBqr2fRNxaJxtwvmai71Ev/7vArc3MZ49I7:P6GuUfqSNjayCSdWq9VpZqsNP/sUBqrb
- TLSH T1ED921801EB6A0425969391B47C02FD0E93D21EA9F3BBB191386096A749EF1C1DF9B50A
- MD5 SHA1 SHA512 SSDEEP TLSH
Email Headers
From
Return-Path
Date
Fri, 31 Oct 2025 17:49:51 +0000
Subject
Action Required: Update Your Company Contact Information
Content-Type
multipart/alternative; boundary="_000_PH0PR11MB5643559FA5B3F227096E995DB4F8APH0PR11MB5643namp_"
Received
from DS0PR05MB10537.namprd05.prod.outlook.com (2603:10b6:8:1a1::7) by DS2PR05MB998328.namprd05.prod.outlook.com with HTTPS; Fri, 31 Oct 2025 17:50:01 +0000
from BL1PR13CA0220.namprd13.prod.outlook.com (2603:10b6:208:2bf::15) by DS0PR05MB10537.namprd05.prod.outlook.com (2603:10b6:8:1a1::7) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9275.13; Fri, 31 Oct 2025 17:49:55 +0000
from MN1PEPF0000F0E3.namprd04.prod.outlook.com (2603:10b6:208:2bf:cafe::83) by BL1PR13CA0220.outlook.office365.com (2603:10b6:208:2bf::15) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.20.9298.5 via Frontend Transport; Fri, 31 Oct 2025 17:49:52 +0000
from PH7PR06CU001.outbound.protection.outlook.com (2a01:111:f403:c107::9) by MN1PEPF0000F0E3.mail.protection.outlook.com (2603:10b6:22e:400:0:1005:0:9) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.20.9275.10 via Frontend Transport; Fri, 31 Oct 2025 17:49:54 +0000
from PH0PR11MB5643.namprd11.prod.outlook.com (2603:10b6:510:d5::21) by PH0PR11MB4792.namprd11.prod.outlook.com (2603:10b6:510:32::11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9275.15; Fri, 31 Oct 2025 17:49:52 +0000
from PH0PR11MB5643.namprd11.prod.outlook.com ([fe80::f783:a54c:8159:7678]) by PH0PR11MB5643.namprd11.prod.outlook.com ([fe80::f783:a54c:8159:7678%4]) with mapi id 15.20.9275.013; Fri, 31 Oct 2025 17:49:51 +0000
Received-Spf
Pass (protection.outlook.com: domain of cofense.com designates 2a01:111:f403:c107::9 as permitted sender) receiver=protection.outlook.com; client-ip=2a01:111:f403:c107::9; helo=PH7PR06CU001.outbound.protection.outlook.com; pr=C
Message-Id
<PH0PR11MB5643559FA5B3F227096E995DB4F8A@PH0PR11MB5643.namprd11.prod.outlook.com>
Extracted URLs
-
file https://www.corporate-intranet-hub.com/directory/update-form
email-html-2.txt
- SHA256 b14200ce6956574e80273a2e57d2bbb3b88ddc178f6c7cfad8ac6b4a4343050b
- MD5 055cd03adc994546ce7a8f3387908b25
- SHA1 13681d9dba611d9af010b24755a2affea0a25ea3
- SHA512 da2113ab5fdb958a113314c9d69b224597d23d766d23c6d04b8378f0c849d4e7984d7a11032cdf78aad0fbf79d3d1fd1423ed4aea52a30dbe749554318891561
- TLSH T1CC51DE47B300010B53DB5B39E593FBDB7A8686D4514B546334706257CDEED2662E378C
- MD5 SHA1 SHA512 TLSH
email-plain-1.txt
- SHA256 68ba2ad510fd8ad9589c6335fc90c8f1e18dac905161cf139dcede26f892f8b6
- MD5 bbec10cb2339cfe66583371ea0ad6521
- SHA1 502280ce77bafa1fa4faec20107561f108b42457
- SHA512 f2b3afb021102056e8f3d28aaf3aed049be22c7b113ae571edc4951a0fa4456f75f83b605731906d504fd9bf77cd63037c4cfe1ef86763da03c6cef4cd13147f
- TLSH T135F0C0DB99A1507D1317424139D4857AFB51439D114F7542A93003E503F1690EB9FB6E
- MD5 SHA1 SHA512 TLSH