General

  • Target
    phish_alert_sp2_2.0.0.0.eml
  • Size 61KB
  • Sample261011-ph2f3ahf74
  • SHA256 9f312ea4c3aa5279bd6a7b8753fff8fb9676953eae6fde31f4b79087cb793011
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • phish_alert_sp2_2.0.0.0.eml
    .eml 61KB
  • Salary Payment Adjustment... See transcript details.eml
    .eml 39KB
  • _pdickison benefits_Salary Adjustment.html
    .html .js 34KB
  • email-plain-1.txt
    325B

phish_alert_sp2_2.0.0.0.eml

  • SHA256 9f312ea4c3aa5279bd6a7b8753fff8fb9676953eae6fde31f4b79087cb793011
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

[email protected]

Date

Sun, 5 Mar 2023 11:43:55 +0000

Subject

Ncsbn Propose Employee Benefit/Salary Payment Adjustment... See transcript details

Content-Type

multipart/mixed; boundary="----sinikael-?=_1-16780447731870.5655004217818779"

Received

from CH2PR01MB5846.prod.exchangelabs.com (2603:10b6:610:45::17) by BN0PR01MB7038.prod.exchangelabs.com with HTTPS; Sun, 5 Mar 2023 11:53:50 +0000

from BN9PR03CA0887.namprd03.prod.outlook.com (2603:10b6:408:13c::22) by CH2PR01MB5846.prod.exchangelabs.com (2603:10b6:610:45::17) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6178.13; Sun, 5 Mar 2023 11:53:43 +0000

from BN7NAM10FT053.eop-nam10.prod.protection.outlook.com (2603:10b6:408:13c:cafe::a5) by BN9PR03CA0887.outlook.office365.com (2603:10b6:408:13c::22) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6156.27 via Frontend Transport; Sun, 5 Mar 2023 11:53:43 +0000

from smtp2.ece.ubc.ca (206.87.227.134) by BN7NAM10FT053.mail.protection.outlook.com (10.13.156.124) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6156.26 via Frontend Transport; Sun, 5 Mar 2023 11:53:42 +0000

from [127.0.0.1] (ssh-linux3.ece.ubc.ca [206.87.227.144]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp2.ece.ubc.ca (Postfix) with ESMTPS id 23047A123B for <[email protected]>; Sun, 5 Mar 2023 03:43:55 -0800 (PST)

Received-Spf

Pass (protection.outlook.com: domain of ubc.ca designates 206.87.227.134 as permitted sender) receiver=protection.outlook.com; client-ip=206.87.227.134; helo=smtp2.ece.ubc.ca; pr=C

Message-Id

<[email protected]>