General

  • Target
    phish_alert_sp2_2.0.0.0 (1).eml
  • Size 44KB
  • Sample260930-sscr8sbd68
  • SHA256 3e3a2017a9ac47781c8fb2b5eca3c5da40b1d3bc5195715236078822a032b7d9
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • phish_alert_sp2_2.0.0.0 (1).eml
    .eml 44KB
  • email-html-1.txt
    .html 30KB

phish_alert_sp2_2.0.0.0 (1).eml

  • SHA256 3e3a2017a9ac47781c8fb2b5eca3c5da40b1d3bc5195715236078822a032b7d9
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

010f01a0ed8ad268-ee751f21-56ab-439c-8fe4-69a1576e79d5-000000@conversionemail.veriforce.com

Date

Tue, 29 Sep 2026 14:21:33 +0000

Subject

=?UTF-8?B?W0VYVEVSTkFMXSBNb3JlIFRoYW4gYSBMb2dpbiBVcGdyYWRlOiBX?= =?UTF-8?B?aHkgVmVyaVNvdXJjZSBJcyBNb3ZpbmcgdG8gVmVyaWZvcmNlT25l?=

Content-Type

multipart/mixed; boundary="----sinikael-?=_1-17907772521110.9223380559380048"

Received

from SJ0PR16MB5084.namprd16.prod.outlook.com (2603:10b6:a03:41a::11) by PH0PR16MB4638.namprd16.prod.outlook.com with HTTPS; Tue, 29 Sep 2026 14:21:42 +0000

from PH5P220CA0010.NAMP220.PROD.OUTLOOK.COM (2603:10b6:510:34a::13) by SJ0PR16MB5084.namprd16.prod.outlook.com (2603:10b6:a03:41a::11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.451.24; Tue, 29 Sep 2026 14:21:33 +0000

from SA2PEPF00003F63.namprd04.prod.outlook.com (2603:10b6:510:34a:cafe::91) by PH5P220CA0010.outlook.office365.com (2603:10b6:510:34a::13) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.451.24 via Frontend Transport; Tue, 29 Sep 2026 14:21:33 +0000

from e226-50.smtp-out.us-east-2.amazonses.com (23.251.226.50) by SA2PEPF00003F63.mail.protection.outlook.com (10.167.248.38) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.472.14 via Frontend Transport; Tue, 29 Sep 2026 14:21:33 +0000

Received-Spf

Pass (protection.outlook.com: domain of conversionemail.veriforce.com designates 23.251.226.50 as permitted sender) receiver=protection.outlook.com; client-ip=23.251.226.50; helo=e226-50.smtp-out.us-east-2.amazonses.com; pr=C

Message-Id

<010f01a0ed8ad268-ee751f21-56ab-439c-8fe4-69a1576e79d5-000000@us-east-2.amazonses.com>

Extracted URLs

  • file https://aka.ms/LearnAboutSenderIdentification

  • file https://app.conversion.ai/external/emails/subscription?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJleHAiOjE4MjIyMjc2OTMsInJlY2lwaWVudElkIjoiNmNhYjYwY2ItNzY3YS00N2NmLThkMTgtM2I2Zjk1OGFjYjI0Iiwic2VudEVtYWlsSWQiOiIwYzFjYWRkZC1mODkwLTU4NjItODJiZC1jMzVjNWU1MGFhYjEifQ.9v5Ujd2VW6AIVd93pwXb7UKzj5PReprsj5ilppRxYfU

  • file https://t.veriforce.com/CL0/https:/conversion-files.com/file/de1df76e-0d88-480f-8c72-ca4578cf8a67%3Futm_campaign=9_29_2026+VS+to+VF1+Migration+Email+%234&utm_medium=email&utm_source=conversion&cai_email=0c1caddd-f890-5862-82bd-c35c5e50aab1/1/010f01a0ed8ad268-ee751f21-56ab-439c-8fe4-69a1576e79d5-000000/ER82uCfOvrQsTzAWslviLP2vVnwvJraL96gjaQPzACk=258

  • file https://t.veriforce.com/CL0/https:/goo.gl/maps/kC9GhnuZ3qv%3Futm_campaign=9_29_2026+VS+to+VF1+Migration+Email+%234&utm_medium=email&utm_source=conversion&cai_email=0c1caddd-f890-5862-82bd-c35c5e50aab1/1/010f01a0ed8ad268-ee751f21-56ab-439c-8fe4-69a1576e79d5-000000/3h3ydT7Y5_bR0Lza0wTh7frsREtTOkKVjzEN9kis8aA=258

  • file https://t.veriforce.com/CL0/https:/veriforceone.com/vf1%3Futm_campaign=9_29_2026+VS+to+VF1+Migration+Email+%234&utm_medium=email&utm_source=conversion&cai_email=0c1caddd-f890-5862-82bd-c35c5e50aab1/1/010f01a0ed8ad268-ee751f21-56ab-439c-8fe4-69a1576e79d5-000000/RH5EInbJH70nZyq1ijan6OE3XLPWKpSLcN9DuvSAWME=258

  • file https://t.veriforce.com/CL0/https:/www.bigmarker.com/veriforce/veriforceone-migration-what-verisource-users-need-to-know%3Futm_campaign=9_29_2026+VS+to+VF1+Migration+Email+%234&utm_medium=email&utm_source=conversion&cai_email=0c1caddd-f890-5862-82bd-c35c5e50aab1/1/010f01a0ed8ad268-ee751f21-56ab-439c-8fe4-69a1576e79d5-000000/rsd_RwLIZs5iiZg6cvN3j2t2EpFQHdEX-19PZj-MHik=258

  • file https://t.veriforce.com/CL0/https:/www.veriforce.com/%3Futm_campaign=9_29_2026+VS+to+VF1+Migration+Email+%234&utm_medium=email&utm_source=conversion&cai_email=0c1caddd-f890-5862-82bd-c35c5e50aab1/1/010f01a0ed8ad268-ee751f21-56ab-439c-8fe4-69a1576e79d5-000000/CM58OpqB7dVJo9ptHziNX4YLsVNKTJskzR3qHs5G5f4=258