Overview

overview

4

Static

static

1

Message.eml

windows10-2004-x64

4

Message.eml

windows11-ltsc_2024-x64

1

Resubmissions

30/09/2026, 16:44

260930-t87g8ax1bz4

30/09/2026, 16:36

260930-t4dpca1erb4

Sharing

Copy URL Twitter E-mail

General

  • Target
    Message.eml
  • Size 73KB
  • Sample260930-t4dpca1erb
  • SHA256 9aadb56ce599dd8b9336edb03735decceb48b4945af0db79b81604da9287b8b4
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • Message.eml
    .eml 73KB
  • email-html-2.txt
    .html 6KB
  • email-plain-1.txt
    1KB
  • image.png
    .png 44KB

Message.eml

  • SHA256 9aadb56ce599dd8b9336edb03735decceb48b4945af0db79b81604da9287b8b4
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

In-Reply-To

81490c583dd54ca7a091613d0b3a52f3@LV2PR20MB4582.namprd20.prod.outlook.com

Date

Wed, 30 Sep 2026 13:12:50 +0000

Subject

Fw: RE: Mr. Tim Wilson

Content-Type

multipart/related; boundary="_004_BYAPR20MB23574BCE2BB8191D7426E339AB8B2BYAPR20MB2357namp_"; type="multipart/alternative"

Received

from BYAPR20MB2357.namprd20.prod.outlook.com (2603:10b6:a03:15c::21) by DS0PR20MB6376.namprd20.prod.outlook.com (2603:10b6:8:126::17) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.451.26; Wed, 30 Sep 2026 13:12:50 +0000

from BYAPR20MB2357.namprd20.prod.outlook.com ([fe80::b59a:95d4:a83f:b490]) by BYAPR20MB2357.namprd20.prod.outlook.com ([fe80::b59a:95d4:a83f:b490%3]) with mapi id 15.21.0451.022; Wed, 30 Sep 2026 13:12:50 +0000

Message-Id

<BYAPR20MB23574BCE2BB8191D7426E339AB8B2@BYAPR20MB2357.namprd20.prod.outlook.com>

Extracted URLs

  • file http://www.farmersagent.com/mmetzger

  • file https://avitalhomeskc-my.sharepoint.com/:b:/g/personal/nick_apgkc_com/IQAK0wunAnKoSrTejS__Ae0wAeOKjjZOZrzYzn2-egQIQM0?e=E60a0D

  • file https://mcw1lpytz5p9fm0cpjpfjr8q-r70.pub.sfmc-content.com/vx1ntzxcvuk