Mensajes en cuarentena (13)[.]zip

Sharing

Copy URL Twitter E-mail

General

Target
Mensajes en cuarentena (13).zip
Size 9KB
Sample260930-xwr4jswzhy
SHA256 ae1994d718aa9437075ac68bd649c92b63525aae356cbde5c44e6f4f20d3da3b
MD5 d61e4db5d2426ca0250edd63d3d0f53b
SHA1 fc5dfc729e48b9ad3b803bd8ffb81e2d38032d28
SHA512 b61d14c1ccb2eedbdef937a3d60aaa926cf53efc9d66abaf38c9ecd13b992f5af776f97dbbaf381cc07578c8055115076759a177cef96696b3d07503663dfa42
SSDEEP 192:n59doRNQNbh7hvxkoY5I3RxueuxKkGHXgZaJygIME9TjJdf:fdou19jh6xKNHyaJygIlVJdf
TLSH
T1BB22AF16F30B5096E2F904B9F0225D4CE7529F4C670808A20CC5A59F6FABAA11D5E16A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

Mensajes en cuarentena (13).zip

.zip 9KB
de7efb3b-c880-4656-0f7a-08df1f0fe7b2/6b02dd25-e949-4206-4347-8b53b5543020.eml

.eml 27KB
email-html-2.txt

.html 14KB
email-plain-1.txt

2KB

Mensajes en cuarentena (13).zip

SHA256 ae1994d718aa9437075ac68bd649c92b63525aae356cbde5c44e6f4f20d3da3b
MD5 d61e4db5d2426ca0250edd63d3d0f53b
SHA1 fc5dfc729e48b9ad3b803bd8ffb81e2d38032d28
SHA512 b61d14c1ccb2eedbdef937a3d60aaa926cf53efc9d66abaf38c9ecd13b992f5af776f97dbbaf381cc07578c8055115076759a177cef96696b3d07503663dfa42
SSDEEP 192:n59doRNQNbh7hvxkoY5I3RxueuxKkGHXgZaJygIME9TjJdf:fdou19jh6xKNHyaJygIlVJdf
TLSH
T1BB22AF16F30B5096E2F904B9F0225D4CE7529F4C670808A20CC5A59F6FABAA11D5E16A
MD5 SHA1 SHA512 SSDEEP TLSH

Password

12345

de7efb3b-c880-4656-0f7a-08df1f0fe7b2/6b02dd25-e949-4206-4347-8b53b5543020.eml

SHA256 5a9f14e55a9d302cc0ef8628e4b81e4d0ba4c8968e7bc862ec34aa18bc6740fc
MD5 603e55b9a8affb8132bf9cc1d35b868a
SHA1 059a9844eb47f9cb3cfbc963b07a91e95c9f9270
SHA512 d13ed652573a3853405e71d69adea82d5e9bbca3088877b450e22b554ec3087725eef6a5571e50d4dad7ecadc4e3925a82c09b4ff0b650b1615b0f6e8d2a2e71
SSDEEP 384:68AmshND146YOPELub8ad0eZk6p3cWWUrEuAzfmA/ASDKAg7O7Rl:oNDG6Y8aXgZB8DKAg7Otl
TLSH
T1F9D2D8615780588B49369179D8217E7CD2A16C0C9B2394F0F877363B4ECA9632E7FB9C
MD5 SHA1 SHA512 SSDEEP TLSH

Password

12345

Email Headers

From

Reply-To

Return-Path

Date

Wed, 30 Sep 2026 16:28:34 +0000

Subject

=?utf-8?q?Siga_en_Vivo_la_rueda_de_prensa_de_la_Convenci=C3=B3n_Internaci?= =?utf-8?q?onal_de_Seguros_2026?=

Content-Type

multipart/alternative; boundary="-------?=_64124-8219477643031"

Received

from BN9PR03CA0583.namprd03.prod.outlook.com (2603:10b6:408:10d::18) by MN2PR13MB3645.namprd13.prod.outlook.com (2603:10b6:208:1f0::10) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.451.26; Wed, 30 Sep 2026 16:28:48 +0000

from BN2PEPF00004FC0.namprd04.prod.outlook.com (2603:10b6:408:10d:cafe::2) by BN9PR03CA0583.outlook.office365.com (2603:10b6:408:10d::18) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.472.15 via Frontend Transport; Wed, 30 Sep 2026 16:28:48 +0000

from email.comunicaciones-fasecolda.com (213.32.172.179) by BN2PEPF00004FC0.mail.protection.outlook.com (10.167.243.186) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.472.14 via Frontend Transport; Wed, 30 Sep 2026 16:28:47 +0000

Received-Spf

Pass (protection.outlook.com: domain of email.comunicaciones-fasecolda.com designates 213.32.172.179 as permitted sender) receiver=protection.outlook.com; client-ip=213.32.172.179; helo=email.comunicaciones-fasecolda.com; pr=C

X-Mailer

Sendinblue

Message-Id

<[email protected]>

Extracted URLs

file http://r.email.comunicaciones-fasecolda.com/mk/cl/f/sh/1t6Af4OiGsDg0aWL0AhaeOcdsDvfxx/TY1P-ORJVncM
file http://r.email.comunicaciones-fasecolda.com/mk/cl/f/sh/1t6Af4OiGsE8LIilOWnVoegTG2uPg1/BSW6rcrZ36kN
file http://r.email.comunicaciones-fasecolda.com/mk/cl/f/sh/1t6Af4OiGsEag0vBmstQyukIdrt9O5/yGULWpNVYYe3
file http://r.email.comunicaciones-fasecolda.com/mk/cl/f/sh/1t6Af4OiGsF30j7cBEzM9Ao81grt69/RbmmzofTO7KA
file http://r.email.comunicaciones-fasecolda.com/mk/cl/f/sh/1t6Af4OiGsFVLRK2Zb5HJQrxPVqcoD/XibKbaKu6hPW
file http://r.email.comunicaciones-fasecolda.com/mk/cl/f/sh/1t6Af4OiGsFxg9WSxxBCTgvmnKpMWH/I5X7tsVaDmSQ
file http://r.email.comunicaciones-fasecolda.com/mk/cl/f/sh/1t6Af4OiGsGQ0ritMJH7dwzcB9o6EL/Cx-RPctKAUHU
file http://r.email.comunicaciones-fasecolda.com/mk/un/v2/sh/1t6AVsdYhqSR1hMbTRJdpu2DZlezi5/tSyDq8ERG2W3
file https://img-thumb.mailinblue.com/10149808/images/content_library/original/69e01f6643b56cd80f92828b.jpeg]
file https://img.mailinblue.com/10149808/images/content_library/original/69e01f6643b56cd80f928289.png]
file https://img.mailinblue.com/10149808/images/content_library/original/69e01f6643b56cd80f92828a.png]
file https://img.mailinblue.com/10149808/images/content_library/original/69e01f6643b56cd80f92828c.png]
file https://img.mailinblue.com/10149808/images/content_library/original/69e01f66466c06a1baeb1204.png]
file https://img.mailinblue.com/10149808/images/content_library/original/69e01f66aba61b5ef2fa8205.png]
file https://img.mailinblue.com/10149808/images/content_library/original/69e01f7443b56cd80f92828d.png]
file https://img.mailinblue.com/10149808/images/content_library/original/69e023e7466c06a1baeb1251.png]
file https://img.mailinblue.com/10149808/images/content_library/original/6abd3721d898afaab0706cbb.png]
file https://r.email.comunicaciones-fasecolda.com/mk/op/sh/1t6AVse4sR7ZnEZDzuSEGoK59iV597/sT4lSjihMQUz]
file https://storage-masivdrive.masivapp.com/27/498744c8-d132-43a6-9a0a-3d6539025b0f/18b91772-57b8-4bad-ab9f-d1cdfa93a1e2/76e2a8d2-2d15-4905-b833-1eaf84f56150/003aeceb-ff75-4837-9d1f-7aa77c47f486.png]
Show all

Sharing

General

Malware Config

Signatures

File Explorer

Mensajes en cuarentena (13).zip

de7efb3b-c880-4656-0f7a-08df1f0fe7b2/6b02dd25-e949-4206-4347-8b53b5543020.eml

Email Headers

Extracted URLs

email-html-2.txt

email-plain-1.txt