202610121528_COMPROBANTE DE PAGO 9 DE OCTUBRE 2026_jaguilar.zip
- SHA256 47c1260d8f6d366846f5c59ec664258663e41cc1e6a36db4694f5e5b93a2b151
Overview
overview
6Static
static
12026101215...ar.zip
windows10-2004-x64
12026101215...ar.zip
windows11-ltsc_2024-x64
12026101218...ar.eml
windows10-2004-x64
62026101218...ar.eml
windows11-ltsc_2024-x64
6Comprobant...A,.png
windows10-2004-x64
1Comprobant...A,.png
windows11-ltsc_2024-x64
1email-html-2.html
windows10-2004-x64
6email-html-2.html
windows11-ltsc_2024-x64
6email-plain-1.txt
windows10-2004-x64
1email-plain-1.txt
windows11-ltsc_2024-x64
1Static task
static1
Behavioral task
behavioral1
Sample
202610121528_COMPROBANTE DE PAGO 9 DE OCTUBRE 2026_jaguilar.zip
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
202610121528_COMPROBANTE DE PAGO 9 DE OCTUBRE 2026_jaguilar.zip
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
20261012185130-COMPROBANTE DE PAGO 9 DE OCTUBRE 2026-jaguilar.eml
Resource
win10v2004-20260911-en
windows10-2004-x64
10 signatures
150 seconds
Behavioral task
behavioral4
Sample
20261012185130-COMPROBANTE DE PAGO 9 DE OCTUBRE 2026-jaguilar.eml
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
11 signatures
150 seconds
Behavioral task
behavioral5
Sample
Comprobante ACH-AET- POLY FIBRAS, S,A,.png
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral6
Sample
Comprobante ACH-AET- POLY FIBRAS, S,A,.png
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral7
Sample
email-html-2.html
Resource
win10v2004-20260911-en
windows10-2004-x64
11 signatures
150 seconds
Behavioral task
behavioral8
Sample
email-html-2.html
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
10 signatures
150 seconds
Behavioral task
behavioral9
Sample
email-plain-1.txt
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral10
Sample
email-plain-1.txt
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target 202610121528_COMPROBANTE DE PAGO 9 DE OCTUBRE 2026_jaguilar.zip
- Size 181KB
- Sample261012-1bv69aeg64
- SHA256 47c1260d8f6d366846f5c59ec664258663e41cc1e6a36db4694f5e5b93a2b151
- MD5 5f690ce8dbecd3d3944bda7fc5eda15a
- SHA1 cc76b5749c35c9e11ad5fc41e421171b218834a2
- SHA512 cbe9e3c9ee768262d3809c82533764c97303fcb0e4e6e5a0b94641c66cb1b6e061a7231cad6b6bcab06acb9aced1d38d51db3e1a4575962950ccc6a9aa0283b4
- SSDEEP 3072:evw9yfsI/NYjsnMeWsTojmAzdU8uaC3Z2us2++Z0j/SY:evgyfdNMsnMeWssjmAzdHuF3Z2y1ZCSY
- TLSH T14004123192C44C176EA769F73C878A6C4270E624E6DDD45B2BB6E9C00D75B287FE6082
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
File Explorer
-
202610121528_COMPROBANTE DE PAGO 9 DE OCTUBRE 2026_jaguilar.zip.zip 181KB
-
20261012185130-COMPROBANTE DE PAGO 9 DE OCTUBRE 2026-jaguilar.eml.eml 253KB
-
Comprobante ACH-AET- POLY FIBRAS, S,A,.png.png 169KB
-
email-html-2.txt.html 5KB
-
email-plain-1.txt1022B
20261012185130-COMPROBANTE DE PAGO 9 DE OCTUBRE 2026-jaguilar.eml
- SHA256 058ff33c373fc7dac0399945b6e3a91a4215f68df67fb1eacda92340220031a5
- MD5 456a1703eeda9e70f7783109bcf8d852
- SHA1 7cdfb4376a78ab361ea6d33e690fc39000b29692
- SHA512 ea362589ad2ab72c158d46327bbec1c654840670852c13c8b28a0c790d8b17d50fe2da07fc3aaee1f62c26b06730da248def511a368db9a7dd607640990141e7
- SSDEEP 3072:gUD0oJCgSdcIGPHp/HMLI3YJBZ0QupjuQDJibASoBORMXGtkSIWn5Oo02D6CmH2E:gUwgpN6spiQFCcO6WtkSIW5VYF56e
- TLSH T10F4402B1C2761AEDC83404F59D4E98A0F0F5D88FA24642B9741ED7F2A3E90794E26D63
- MD5 SHA1 SHA512 SSDEEP TLSH
Email Headers
From
Date
Mon, 12 Oct 2026 18:50:41 +0000
Subject
CAS::COMPROBANTE DE PAGO 9 DE OCTUBRE 2026
Content-Type
multipart/mixed; boundary="_004_CAKZzdJaFzCXF4oHHTmz5T59p9BRa17P3exqi0ECckxRuLxkQmailgm_"
Received
from LV2PR22MB148923.namprd22.prod.outlook.com (2603:10b6:408:3ad::13) by DS3PR22MB894617.namprd22.prod.outlook.com with HTTPS; Mon, 12 Oct 2026 18:51:26 +0000
from MW3PR06CA0016.namprd06.prod.outlook.com (2603:10b6:303:2a::21) by LV2PR22MB148923.namprd22.prod.outlook.com (2603:10b6:408:3ad::13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.496.21; Mon, 12 Oct 2026 18:51:22 +0000
from MWH0EPF000A672F.namprd04.prod.outlook.com (2603:10b6:303:2a:cafe::9) by MW3PR06CA0016.outlook.office365.com (2603:10b6:303:2a::21) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.496.5 via Frontend Transport; Mon, 12 Oct 2026 18:51:22 +0000
from mail-lf1-x135.google.com (2a00:1450:4864:20::135) by MWH0EPF000A672F.mail.protection.outlook.com (2603:10b6:30f:fff5::415) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.522.6 via Frontend Transport; Mon, 12 Oct 2026 18:51:22 +0000
by mail-lf1-x135.google.com with SMTP id 2adb3069b0e04-5bccecba199so1459612e87.1 for <[email protected]>; Mon, 12 Oct 2026 11:51:22 -0700 (PDT)
X-Received
by 2002:a05:6512:304a:b0:5b8:f7fc:959e with SMTP id 2adb3069b0e04-5bcde6c9e26mr3899956e87.34.1791831079991; Mon, 12 Oct 2026 11:51:19 -0700 (PDT)
Received-Spf
Pass (protection.outlook.com: domain of productosciclon.com designates 2a00:1450:4864:20::135 as permitted sender) receiver=protection.outlook.com; client-ip=2a00:1450:4864:20::135; helo=mail-lf1-x135.google.com; pr=C
Message-Id
<CAK-Zzd_JaFzCXF4oHHTmz5T59p9BRa17P3exqi0ECckxRuLxkQ@mail.gmail.com>
Extracted URLs
-
file https://cdn2.hubspot.net/hubfs/53/tools/email-signature-generator/icons/email-icon-2x.png]
-
file https://cdn2.hubspot.net/hubfs/53/tools/email-signature-generator/icons/link-icon-2x.png]
-
file https://cdn2.hubspot.net/hubfs/53/tools/email-signature-generator/icons/phone-icon-2x.png]
-
file https://drive.google.com/uc?id=1rRQkdodariyrDbRHhnvJegHUIKX-eaY1]
-
file https://productosciclon.com/
Comprobante ACH-AET- POLY FIBRAS, S,A,.png
- SHA256 9a68a6277295896caffab39157542dfe5e2effb578c4e3982555240e5d392d5a
- MD5 e40e7dd6d5d3d4b8caec9312fe508eed
- SHA1 db5855af799dbb016efc21fad9217c0fe4dd016c
- SHA512 13509df61c4105778584cbc756235c7ded001f092d4ccd895b73ae237ad40fc3c6fcd8de8a1affd59ee6d53c45ba073f422ed472ec3163b4507f907253abd862
- SSDEEP 3072:NpKQZrVSt1+YiI/n1GULQ50kcr9r9Y3cEF1N2ZwUcuS7+zvoBdJKXGmbx9nAISj:NpKQDC1GwnBZusEPNLUc/7+6sbx9Yj
- TLSH T11F04F107DC7960FB7D470B94689A0116F9294AC0028DB6BEBF7616DE530A4B3DEA374C
- MD5 SHA1 SHA512 SSDEEP TLSH
email-html-2.txt
- SHA256 e029a6650d5bf39c6fcd8df768ecfc6a80e03632ec5cf7275e295e27693e6429
- MD5 e230cd91125a7941c0b4e34d37bf936d
- SHA1 f10949cc5778160194c92822c026b2c0a52cdd1b
- SHA512 775cc6eeb51a1276ecb70b47e330a7d1215f3badb47bb29683c9c81c58bf138d40d624354176ac74eb5cbbc210637ec7434cf194510a443e523da2f98d5e6887
- SSDEEP 96:NWj1YZoOe6g0ZQ95RY1rSrBl1rKr51rArRL9h5:NWjUVeWyKQBlg5apn5
- TLSH T1EDC10F63D2C08E2DC03E4079D051D5F8C6C2235787A21FE0D6676A37AED587696E36AC
- MD5 SHA1 SHA512 SSDEEP TLSH
email-plain-1.txt
- SHA256 33dae35398b6b4dd6297f61a454db4ade7119e4fbd0e39c4a3fcfc14d90934ed
- MD5 6aeced905c01eb24453a96f3b10b8ffb
- SHA1 92965e4bbf4ecc5cd0fc743dfc6aa66bcf73aaf3
- SHA512 779d6cd1baa8729e4ab8bb902f7d10a96bf0168a37b9abb1ef6918c6cd1589174092a3ce98c520aae035649ffb69658d9d1ce96c493207d6a3c93209ef07439e
- TLSH T15A11327FD5F60693A7E1D264B002AA6FD58300C1EC41C142F1A1896FC8CCC1AD6C867E
- MD5 SHA1 SHA512 TLSH