Overview

overview

8

Static

static

3

Interested...78.msg

windows10-2004-x64

1

Interested...78.msg

windows11-ltsc_2024-x64

1

Aditya Pat...er.pdf

windows10-2004-x64

7

Aditya Pat...er.pdf

windows11-ltsc_2024-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    Interested in the Product Manager position - 4433838878.msg
  • Size 120KB
  • Sample261009-sc6elsh18y
  • SHA256 d60e8e8b16eb77ca12ffeeafec2586f827a7e8d8a43e36b7e66333c8f511fb00
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
pdflink

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

    pdflink

File Explorer

  • Interested in the Product Manager position - 4433838878.msg
    .msg 120KB
  • Aditya Patange_Resume_Product_Manager.pdf
    .pdf 27KB

Interested in the Product Manager position - 4433838878.msg

  • SHA256 d60e8e8b16eb77ca12ffeeafec2586f827a7e8d8a43e36b7e66333c8f511fb00
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

[email protected]

Date

Sat, 4 Jul 2026 03:46:18 -0700

Subject

Interested in the Product Manager position - 4433838878

Content-Type

multipart/mixed; boundary="0000000000008633540655c6c038"

Received

from DU6PR04MB11088.eurprd04.prod.outlook.com (2603:10a6:10:5c3::9) by GV1PR04MB10727.eurprd04.prod.outlook.com with HTTPS; Sat, 4 Jul 2026 10:48:03 +0000

from DU2P251CA0029.EURP251.PROD.OUTLOOK.COM (2603:10a6:10:230::31) by DU6PR04MB11088.eurprd04.prod.outlook.com (2603:10a6:10:5c3::9) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.181.8; Sat, 4 Jul 2026 10:47:32 +0000

from DB5PEPF00014B8A.eurprd02.prod.outlook.com (2603:10a6:10:230:cafe::4a) by DU2P251CA0029.outlook.office365.com (2603:10a6:10:230::31) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.181.8 via Frontend Transport; Sat, 4 Jul 2026 10:47:32 +0000

from inpost.tmes.trendmicro.eu (18.185.115.105) by DB5PEPF00014B8A.mail.protection.outlook.com (10.167.8.198) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.181.6 via Frontend Transport; Sat, 4 Jul 2026 10:47:32 +0000

from 209.85.218.53_.trendmicro.com (unknown [172.21.173.118]) by inpost.tmes.trendmicro.eu (Postfix) with SMTP id 43A71C002D4B for <[email protected]>; Sat, 04 Jul 2026 10:47:32 +0000 (UTC)

from mail-ej1-f53.google.com (unknown [209.85.218.53]) by inpre01.tmes.trendmicro.eu (Trend Micro Email Security) with ESMTPS id 19880C1568C6 for <[email protected]>; Sat, 04 Jul 2026 10:46:23 +0000 (UTC)

by mail-ej1-f53.google.com with SMTP id a640c23a62f3a-c12788a75abso166173666b.2 for <[email protected]>; Sat, 04 Jul 2026 03:46:23 -0700 (PDT)

from 363584050897 named unknown by gmailapi.google.com with HTTPREST; Sat, 4 Jul 2026 03:46:18 -0700

from 363584050897 named unknown by gmailapi.google.com with HTTPREST; Sat, 4 Jul 2026 03:46:18 -0700

X-Received

by 2002:a17:906:f5a8:b0:c12:b6c2:fad0 with SMTP id a640c23a62f3a-c12e6b41fd5mr79390466b.24.1783161982150; Sat, 04 Jul 2026 03:46:22 -0700 (PDT)

Received-Spf

SoftFail (protection.outlook.com: domain of transitioning gmail.com discourages use of 18.185.115.105 as permitted sender)

Message-Id

<CAN9aB+[email protected]>

Extracted URLs

  • file https://s1.lnk-fllw.com/o/eyJ0cmFja2luZ19pZCI6IlFaREp5Q3FIUWxhWktLUTZJdUhfS1EiLCJpbnN0YW5jZSI6eyJwb3J0IjoxNjg5OX19