Resubmissions

02/10/2026, 06:51

261002-hmmedatfjf3

02/10/2026, 06:44

261002-hhg9vstw7n3

General

  • Target
    noname (26).eml
  • Size 94KB
  • Sample261002-hmmedatfjf
  • SHA256 9ddd16939c490edd34812ac0a429d4147869c0df36a3121991bc079155370783
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

File Explorer

  • noname (26).eml
    .eml 94KB
  • email-plain-1.txt
    334B
  • psp077596_1sp7jqy2715.pdf
    .pdf 62KB

noname (26).eml

  • SHA256 9ddd16939c490edd34812ac0a429d4147869c0df36a3121991bc079155370783
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Date

Thu, 1 Oct 2026 15:09:55 +0000

Subject

AR CDE:562658 V/REF 3000-9022012141 /CBULOUP

Content-Type

multipart/mixed; boundary="_002_20261001170955121274DCGCS03_"

Received

from PR0P264MB2274.FRAP264.PROD.OUTLOOK.COM (2603:10a6:102:16a::14) by PR1P264MB3862.FRAP264.PROD.OUTLOOK.COM with HTTPS; Thu, 1 Oct 2026 15:16:31 +0000

from ZR1PEPF000077B5.CHEP278.PROD.OUTLOOK.COM (2603:10a6:918::436) by PR0P264MB2274.FRAP264.PROD.OUTLOOK.COM (2603:10a6:102:16a::14) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.472.18; Thu, 1 Oct 2026 15:16:28 +0000

from MI3PEPF0000849A.eurprd03.prod.outlook.com (2603:10a6:298:1::79) by ZR1PEPF000077B5.outlook.office365.com (2603:10a6:918::436) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.382.15 via Frontend Transport; Thu, 1 Oct 2026 15:16:28 +0000

from esa.hc2212-17.eu.iphmx.com (194.165.202.183) by MI3PEPF0000849A.mail.protection.outlook.com (10.167.240.185) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.472.14 via Frontend Transport; Thu, 1 Oct 2026 15:16:27 +0000

from mx07-008a2004.pphosted.com ([66.159.244.200]) by esa20.hc2212-17.eu.iphmx.com with ESMTP/TLS/TLS_AES_256_GCM_SHA384; 01 Oct 2026 17:16:26 +0200

from pps.filterd (m0485755.ppops.net [127.0.0.1]) by mx07-008a2004.pphosted.com (8.18.1.11/8.18.1.11) with ESMTP id 691Dct8q3602308 for <[email protected]>; Thu, 1 Oct 2026 17:16:26 +0200

from smtp-eu.ser.proofpoint.com (pmta-euc.ser.proofpoint.com [3.78.107.200]) by mx07-008a2004.pphosted.com (PPS) with ESMTPS id 4gxpremye1-2 (version=TLSv1.3 cipher=TLS_AES_128_GCM_SHA256 bits=128 verify=NOT) for <[email protected]>; Thu, 01 Oct 2026 17:16:26 +0200 (MEST)

from DC-EXIM-2.avm-services.com ([185.80.16.62]) by cmsmtp with ESMTPSA id CIWHxibPKvuUxCIWHxYWhQ; Thu, 01 Oct 2026 15:16:25 +0000

from [192.168.111.70] (helo=DC-GCS-03) by DC-EXIM-2.avm-services.com with smtp (Exim 4.92) (envelope-from <[email protected]>) id 1xCIUc-0006lT-V7 for [email protected]; Thu, 01 Oct 2026 17:14:42 +0200

Received-Spf

Pass (esa.hc2212-17.eu.iphmx.com: domain of [email protected] designates 66.159.244.200 as permitted sender) identity=mailfrom; client-ip=66.159.244.200; receiver=esa.hc2212-17.eu.iphmx.com; envelope-from="[email protected]"; x-sender="[email protected]"; x-conformance=spf_only; x-record-type="v=spf1"; x-record-text="v=spf1 ip4:66.159.244.200 ip4:66.159.243.55"

Message-Id

<20261001-17095512-1274@DC-GCS-03>