attachment20261006-20549-fenwzp.zip
- SHA256 457aaa9ca645375814aa0d4a8a5f0c0cc75ea15dc28903fdfe2ea27af786df41
Static task
static1
General
- Target attachment20261006-20549-fenwzp.zip
- Size 8KB
- Sample261006-xm74eats8n
- SHA256 457aaa9ca645375814aa0d4a8a5f0c0cc75ea15dc28903fdfe2ea27af786df41
- MD5 13047b62f67a813185d57f0a5e2d04bc
- SHA1 cbf488a3ebf6ba46dccf6812dd34596918ba9647
- SHA512 b9b3e7b662d62b08c75c5534d896830dd239f7895959f6c8b8088290d3a639de8c22dba2b62b0bd2818287b01776607c55294708e81c122fda7acf6bd0158210
- SSDEEP 192:IDrvz3o2WI20mEIG/pBNXKqdO7Wi39g6wyI7Y:0vLzNP+2BN6qd4Ng6wyyY
- TLSH T14602AF9FD1BA0E5591C6FB26BAFC1947979BC440E54072ED4A6C86E3DF212B60C13819
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
File Explorer
-
attachment20261006-20549-fenwzp.zip.zip 8KB
-
TEST.eml.eml 16KB
-
email-html-2.txt.html 413B
-
email-plain-1.txt15B
TEST.eml
- SHA256 b5dcd975281ccb581fac6b6d7d7902166f233cc37b8dff947f9fe327b7339fca
- MD5 aba1e2a4970fef3cd67a7f91cb5a230a
- SHA1 8d7de89389cc628e959fe7b8424fec808fc14988
- SHA512 859b6bc9d3220f55e2e417ed372e439e9a82f2d465b1c885873d28e97e748714a53d4290e7ef8ff4d06ff36b94e69327401e43120744b0610d4581dae5df232e
- SSDEEP 384:u6JgBWIfqSNjaLISdWqPQpg+NZqsN0vfIBqRJ0dmQdU0i5tYrdxU17wPr1h0ulEL:uIgBWIfqSNjaLISdWqPUg0ZqsN0vfIBS
- TLSH T1A7720A50DF6E1425E993A0982D01FD0D63D22FA8F7BBF1E035A995B2059E1C9CF0B84B
- MD5 SHA1 SHA512 SSDEEP TLSH
Email Headers
From
Return-Path
Date
Wed, 26 Mar 2025 18:35:54 +0000
Subject
TEST
Content-Type
multipart/alternative; boundary="_000_DM4PR11MB6286BF8FF41E6E3B61C7D8BEC9A62DM4PR11MB6286namp_"
Received
from LV8PR16MB6284.namprd16.prod.outlook.com (2603:10b6:408:1c1::8) by LV8PR16MB6379.namprd16.prod.outlook.com with HTTPS; Wed, 26 Mar 2025 18:36:09 +0000
from BN0PR04CA0186.namprd04.prod.outlook.com (2603:10b6:408:e9::11) by LV8PR16MB6284.namprd16.prod.outlook.com (2603:10b6:408:1c1::8) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8534.44; Wed, 26 Mar 2025 18:36:01 +0000
from BN1PEPF00006002.namprd05.prod.outlook.com (2603:10b6:408:e9:cafe::f9) by BN0PR04CA0186.outlook.office365.com (2603:10b6:408:e9::11) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.20.8534.44 via Frontend Transport; Wed, 26 Mar 2025 18:36:01 +0000
from NAM12-BN8-obe.outbound.protection.outlook.com (2a01:111:f403:2418::70b) by BN1PEPF00006002.mail.protection.outlook.com (2603:10b6:40f:fc02::1aa) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.20.8534.20 via Frontend Transport; Wed, 26 Mar 2025 18:35:58 +0000
from DM4PR11MB6286.namprd11.prod.outlook.com (2603:10b6:8:a7::8) by SA1PR11MB5802.namprd11.prod.outlook.com (2603:10b6:806:235::16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8534.43; Wed, 26 Mar 2025 18:35:55 +0000
from DM4PR11MB6286.namprd11.prod.outlook.com ([fe80::269:e62a:fc41:c826]) by DM4PR11MB6286.namprd11.prod.outlook.com ([fe80::269:e62a:fc41:c826%3]) with mapi id 15.20.8534.043; Wed, 26 Mar 2025 18:35:54 +0000
Received-Spf
Pass (protection.outlook.com: domain of cofense.com designates 2a01:111:f403:2418::70b as permitted sender) receiver=protection.outlook.com; client-ip=2a01:111:f403:2418::70b; helo=NAM12-BN8-obe.outbound.protection.outlook.com; pr=C
Message-Id
<DM4PR11MB6286BF8FF41E6E3B61C7D8BEC9A62@DM4PR11MB6286.namprd11.prod.outlook.com>
email-html-2.txt
- SHA256 303f9ac8ed37424a9bf3ee49a197362cb8af1dd959d4f31ba9ca871ae3b261da
- MD5 4b04b591835167e3f8fce6333b14b1fa
- SHA1 a3965cb9234bdc0fe13dee7547e23f49107825dc
- SHA512 1c91deaf43bf1c73584ef4a362df0f892dbbabc67e3e138b2b86f669ba808e6024b281750b849033a8af17217472a4a8a399f6f0c295b650e56a902c6f1115ba
- TLSH T108E0F12A62050C0B52F36B78E8D2FBD119831509950BAC511870316BD9DFF14C1E33C8
- MD5 SHA1 SHA512 TLSH
email-plain-1.txt
- SHA256 c33734212cbbf0fd789dab4f782adb6df28068ab1a532a7cf2083fb2c41365fd
- MD5 05dabe6474dda884dd111482fec8c93d
- SHA1 76c4b422710b266ae6afb1df5543b480d53b16a5
- SHA512 8187c3c3bd73e824767a742c8c7e0e1c6f33f46e6608adb6a943e480c22839018a7139afebe059b3bee910c42fac6fba6dd3f78bc8192ebec9a83e82b81f5495
- MD5 SHA1 SHA512