Resubmissions

02/10/2026, 10:27

261002-mhewysxx8k3

02/10/2026, 10:24

261002-mflxgsztf18

02/10/2026, 10:18

261002-mcap2swdke1

General

  • Target
    Esp_md,_o_posibilă_oportunitate_de_finanțare_cu_East_Europe_Foundation.eml
  • Size 630KB
  • Sample261002-mcap2swdke
  • SHA256 a2dd8741e82d95a2462dc330915f765b32eb7d498d1db4b1c165f6188301d0ab
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • Esp_md,_o_posibilă_oportunitate_de_finanțare_cu_East_Europe_Foundation.eml
    .eml 630KB
  • EEF_Moldova_Participation_Proposal_DRAFT.zip
    .zip 453KB
  • email-plain-1.txt
    2KB

Esp_md,_o_posibilă_oportunitate_de_finanțare_cu_East_Europe_Foundation.eml

  • SHA256 a2dd8741e82d95a2462dc330915f765b32eb7d498d1db4b1c165f6188301d0ab
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Delivered-To

[email protected]

In-Reply-To

[email protected]

Return-Path

<[email protected]>

Date

Thu, 24 Sep 2026 13:36:13 +0300

Subject

=?UTF-8?Q?Re=3A_Esp=2Emd=2C_o_posibil=C4=83_oportunitate_de_fina?= =?UTF-8?Q?n=C8=9Bare_cu_East_Europe_Foundation_Moldova_/_a_potential_fund?= =?UTF-8?Q?ing_opportunity?=

Content-Type

multipart/mixed; boundary="=_61ac1fc48fbd4bb51d992a60bf8d8b42"

Received

by 2002:a05:6a10:b594:b0:755:ce39:ebd7 with SMTP id o20csp3325322pxl; Thu, 24 Sep 2026 03:36:22 -0700 (PDT)

from relay0-g-e.mailbaby.net (relay0-g-e.mailbaby.net. [67.217.53.6]) by mx.google.com with ESMTPS id 6a1803df08f44-9141e303954si13974286d6.617.2026.09.24.03.36.21 for <[email protected]> (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 24 Sep 2026 03:36:21 -0700 (PDT)

from mb-nj-kvm1.internal (mb-nj-kvm1.internal [10.10.2.10]) (Authenticated sender: mb88484) by relay0-g-e.mailbaby.net (MailBabyMTA) with ESMTPSA id 1a0d2fcc042000dd6a.001 for <[email protected]> (version=TLSv1.3 cipher=TLS_AES_256_GCM_SHA384); Thu, 24 Sep 2026 10:36:14 +0000

from [::1] (port=57732 helo=papa.julyns.com) by papa.julyns.com with esmtpa (Exim 4.99.5) (envelope-from <[email protected]>) id 1x9goH-0000000Ba7V-2Y2p for [email protected]; Thu, 24 Sep 2026 10:36:13 +0000

X-Received

by 2002:a05:6214:ca6:b0:912:1f0f:b1e3 with SMTP id 6a1803df08f44-91421cf8d16mr16538536d6.7.1790246181797; Thu, 24 Sep 2026 03:36:21 -0700 (PDT)

Received-Spf

pass (google.com: domain of [email protected] designates 67.217.53.6 as permitted sender) client-ip=67.217.53.6;

User-Agent

Roundcube Webmail/1.6.18

Message-Id

<[email protected]>