QuarantineMessage.zip
- SHA256 c85fb925ce9dd6fbe702fe6c2e68f66e563bdfd5959da59a8aa78d34fc7458b2
Static task
static1
Behavioral task
behavioral1
Sample
GUIA_SIMPLES_466487.pdf
Resource
win10v2004-20260911-en
Wed, 30 Sep 2026 03:06:07 -0300
=?utf-8?q?PAGDAS_SIMPLES_NACIONAL-_VENCENDO_HOJE_PROTOCOLO-411762?=
multipart/mixed; boundary="===============6677166811713622054=="
from SJ2P221CA0010.NAMP221.PROD.OUTLOOK.COM (2603:10b6:a03:5db::19) by CPUP152MB4553.LAMP152.PROD.OUTLOOK.COM (2603:10d6:103:bd::9) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.451.26; Wed, 30 Sep 2026 06:07:33 +0000
from SJ1PEPF00002326.namprd03.prod.outlook.com (2603:10b6:a03:5db:cafe::76) by SJ2P221CA0010.outlook.office365.com (2603:10b6:a03:5db::19) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.472.16 via Frontend Transport; Wed, 30 Sep 2026 06:07:32 +0000
from protection.ayko.email (189.50.2.222) by SJ1PEPF00002326.mail.protection.outlook.com (10.167.242.89) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.472.14 via Frontend Transport; Wed, 30 Sep 2026 06:07:30 +0000
from mail.cdcontabilidade5.1821realestate.com (mail.cdcontabilidade5.1821realestate.com [85.158.111.104]) by protection.ayko.email with ESMTPS id 68U66m96003694-68U66m98003694 (version=TLSv1.3 cipher=TLS_AES_256_GCM_SHA384 bits=256 verify=NO) for <[email protected]>; Wed, 30 Sep 2026 03:06:51 -0300
from EC2AMAZ-ARC1QJT.ec2.internal (ec2-100-58-54-70.compute-1.amazonaws.com [100.58.54.70]) by mail.cdcontabilidade1.1821realestate.com (Postfix) with ESMTPSA id CBD742E179 for <[email protected]>; Wed, 30 Sep 2026 06:06:07 +0000 (UTC)
SoftFail (protection.outlook.com: domain of transitioning cdcontabilidade1.1821realestate.com discourages use of 189.50.2.222 as permitted sender)
<179074836766.3892.332734910110781388@EC2AMAZ-ARC1QJT.ec2.internal>