Resubmissions

08/10/2026, 13:32

261008-qs5rxafa8310

08/10/2026, 13:24

261008-qnrz9azs2l10

General

  • Target
    41139fff-4912-56e2-8992-2839448c2a4a.eml
  • Size 1.5MB
  • Sample261008-qs5rxafa83
  • SHA256 d827b5fb83f5828d0bf062270bff295e1e70644d324459a43a322b08fe341ac4
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • 41139fff-4912-56e2-8992-2839448c2a4a.eml
    .eml 1.5MB
  • ThaiHC00202608102026.7z
    .7z 1.1MB
  • ThaiHC00202608102026.JS
    .js 3.6MB
  • email-html-2.txt
    .html 17KB
  • email-plain-1.txt
    627B
  • image009.jpg
    .jpg 15KB

41139fff-4912-56e2-8992-2839448c2a4a.eml

  • SHA256 d827b5fb83f5828d0bf062270bff295e1e70644d324459a43a322b08fe341ac4
  • MD5 SHA1 SHA512 SSDEEP TLSH
Password
M@yIsangPun0NgKamatisNanabaliDahilSabigatng!bon

Email Headers

In-Reply-To

[email protected]

Return-Path

[email protected]

Date

Thu, 08 Oct 2026 03:37:16 +0100

Subject

Request for Quotation and Lead Time - (Thai Honda Co,Ltd)

Content-Type

multipart/mixed; boundary="=_bb2c2f9667d377302be0fb91d7f8887e"

Received

from SEZPR04MB7734.apcprd04.prod.outlook.com (::1) by SETPR04MB9761.apcprd04.prod.outlook.com with HTTPS; Thu, 8 Oct 2026 02:43:02 +0000

from SG2P153CA0031.APCP153.PROD.OUTLOOK.COM (2603:1096:4:c7::18) by SEZPR04MB7734.apcprd04.prod.outlook.com (2603:1096:101:21d::8) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.496.15; Thu, 8 Oct 2026 02:42:14 +0000

from SG1PEPF000082E8.apcprd02.prod.outlook.com (2603:1096:4:c7:cafe::36) by SG2P153CA0031.outlook.office365.com (2603:1096:4:c7::18) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.522.4 via Frontend Transport; Thu, 8 Oct 2026 02:42:14 +0000

from esa2.hc847-16.ap.iphmx.com (139.138.44.82) by SG1PEPF000082E8.mail.protection.outlook.com (10.167.240.9) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.496.14 via Frontend Transport; Thu, 8 Oct 2026 02:42:13 +0000

from cleavarbrooks.com ([208.123.119.18]) by esa2.hc847-16.ap.iphmx.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 07 Oct 2026 19:42:08 -0700

from [::1] (helo=localhost) by cleavarbrooks.com with esmtpa (Exim 4.95) (envelope-from <[email protected]>) id 1xEe0o-007iFH-Ry; Thu, 08 Oct 2026 02:37:38 +0000

Received-Spf

SoftFail (protection.outlook.com: domain of transitioning cleavarbrooks.com discourages use of 139.138.44.82 as permitted sender)

Pass (esa2.hc847-16.ap.iphmx.com: domain of [email protected] designates 208.123.119.18 as permitted sender) identity=mailfrom; client-ip=208.123.119.18; receiver=esa2.hc847-16.ap.iphmx.com; envelope-from="[email protected]"; x-sender="[email protected]"; x-conformance=spf_only; x-record-type="v=spf1"; x-record-text="v=spf1 a mx ip4:208.123.119.18 ~all"

Message-Id

<[email protected]>

Extracted URLs

  • file https://aka.ms/LearnAboutSenderIdentification