Overview

overview

3

Static

static

1

1XXXXXXXX4...47.pdf

windows10-2004-x64

3

1XXXXXXXX4...47.pdf

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    FW SMARTS - Payment Advice to Beneficiary.msg
  • Size 161KB
  • Sample261001-xnkphaaf28
  • SHA256 2150cc08dbc4e50cf4ffb6d779b089d870addd046ae3efd1f2844983f4452bd5
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • FW SMARTS - Payment Advice to Beneficiary.msg
    .msg 161KB
  • 1XXXXXXXX4_20260714_1347.pdf
    .pdf 78KB

FW SMARTS - Payment Advice to Beneficiary.msg

  • SHA256 2150cc08dbc4e50cf4ffb6d779b089d870addd046ae3efd1f2844983f4452bd5
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

In-Reply-To

979127124.18602.1784004511154@APFYHB12

Return-Path

[email protected]

Date

Thu, 1 Oct 2026 18:48:38 +0000

Subject

FW: SMAR&TS - Payment Advice to Beneficiary

Content-Type

application/ms-tnef; name="winmail.dat"

Received

from SJ0PR05MB7264.namprd05.prod.outlook.com (2603:10b6:a03:28d::11) by AT6PR05MB470628.namprd05.prod.outlook.com with HTTPS; Thu, 1 Oct 2026 18:48:39 +0000

from PH5PR05MB998505.namprd05.prod.outlook.com (2603:10b6:510:39e::21) by SJ0PR05MB7264.namprd05.prod.outlook.com (2603:10b6:a03:28d::11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.472.18; Thu, 1 Oct 2026 18:48:38 +0000

from PH5PR05MB998505.namprd05.prod.outlook.com ([fe80::6ae2:6ce3:6f06:5837]) by PH5PR05MB998505.namprd05.prod.outlook.com ([fe80::6ae2:6ce3:6f06:5837%7]) with mapi id 15.21.0472.016; Thu, 1 Oct 2026 18:48:38 +0000

Message-Id

<PH5PR05MB998505A8D2B42A75D939A75909828A2@PH5PR05MB998505.namprd05.prod.outlook.com>

Extracted URLs

  • file http://etapro.com

  • file http://sg.smbc.co.jp