Overview

overview

7

Static

static

1

Potential ...B).msg

windows10-2004-x64

7

Potential ...B).msg

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    Potential Phish (32.9 KB).msg
  • Size 68KB
  • Sample261012-v2verads51
  • SHA256 55637803c7e501473d29afbc6e62c30c1daaa356dbb3b26197463f774e5a67b4
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • Potential Phish (32.9 KB).msg
    .msg 68KB

Potential Phish (32.9 KB).msg

  • SHA256 55637803c7e501473d29afbc6e62c30c1daaa356dbb3b26197463f774e5a67b4
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

[email protected]

Date

Sat, 10 Oct 2026 19:43:39 -0700

Subject

Update your card information for PayPal

Content-Type

text/html; charset="utf-8"

Received

from SA0PR04MB7227.namprd04.prod.outlook.com (2603:10b6:806:ed::13) by DS3PR04MB10056.namprd04.prod.outlook.com with HTTPS; Sun, 11 Oct 2026 02:43:45 +0000

from BN8PR04CA0059.namprd04.prod.outlook.com (2603:10b6:408:d4::33) by SA0PR04MB7227.namprd04.prod.outlook.com (2603:10b6:806:ed::13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.496.20; Sun, 11 Oct 2026 02:43:42 +0000

from BN3PEPF0000B073.namprd04.prod.outlook.com (2603:10b6:408:d4:cafe::33) by BN8PR04CA0059.outlook.office365.com (2603:10b6:408:d4::33) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.496.5 via Frontend Transport; Sun, 11 Oct 2026 02:43:41 +0000

from mx0a-00332601.pphosted.com (148.163.133.252) by BN3PEPF0000B073.mail.protection.outlook.com (10.167.243.118) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.522.6 via Frontend Transport; Sun, 11 Oct 2026 02:43:41 +0000

from pps.filterd (m0266389.ppops.net [127.0.0.1]) by mx0a-00332601.pphosted.com (8.18.1.11/8.18.1.11) with ESMTP id 69B2heKV787769; Sun, 11 Oct 2026 02:43:40 GMT

from mx17.slc.paypal.com (mx17.slc.paypal.com [173.0.84.6]) by mx0a-00332601.pphosted.com (PPS) with ESMTPS id 4h7dfv97hd-1 (version=TLSv1.3 cipher=TLS_AES_256_GCM_SHA384 bits=256 verify=NOT) for <[email protected]>; Sun, 11 Oct 2026 02:43:39 +0000 (GMT)

Received-Spf

SoftFail (protection.outlook.com: domain of transitioning paypal.com discourages use of 148.163.133.252 as permitted sender)

Message-Id

<49.D1.11152.BD7FACA6@ccg14mail06>

Extracted URLs

  • file http://Outlook.com

  • file http://www.linkedin.com/company/1482?trk=tyah&amp;v=1&amp;utm_source=unp&amp;utm_medium=email&amp;utm_campaign=RT000093&amp;utm_unptid=90871015-c51d-11f1-b75c-859d0deb2266&amp;ppid=RT000093&amp;cnac=US&amp;rsta=en_US%28en-US%29&amp;cust=HXNASM6UZC9WS&amp;unptid=90871015-c51d-11f1-b75c-859d0deb2266&amp;calc=a944778fd1cf1&amp;unp_tpcid=CardExpiryWarning&amp;page=main%3Aemail%3ART000093&amp;pgrp=main%3Aemail&amp;e=re&amp;mchn=em&amp;s=ci&amp;mail=sys&amp;appVersion=1.447.0&amp;tenant_name=PAYPAL&amp;xt=185428%2C182450%2C185426%2C175543%2C104038%2C183981%2C184725%2C180509&amp;xe=115153%2C114833%2C115152%2C114002%2C101255%2C114941%2C115052%2C114543&amp;link_ref=company_1482

  • file http://www.linkedin.com/company/1482?trk=tyah&v=1&utm_source=unp&utm_medium=email&utm_campaign=RT000093&utm_unptid=90871015-c51d-11f1-b75c-859d0deb2266&ppid=RT000093&cnac=US&rsta=en_US%28en-US%29&cust=HXNASM6UZC9WS&unptid=90871015-c51d-11f1-b75c-859d0deb2266&calc=a944778fd1cf1&unp_tpcid=CardExpiryWarning&page=main%3Aemail%3ART000093&pgrp=main%3Aemail&e=re&mchn=em&s=ci&mail=sys&appVersion=1.447.0&tenant_name=PAYPAL&xt=185428%2C182450%2C185426%2C175543%2C104038%2C183981%2C184725%2C180509&xe=115153%2C114833%2C115152%2C114002%2C101255%2C114941%2C115052%2C114543&link_ref=company_1482

  • file https://paypalobjects.com/digitalassets/c/system-triggered-email/n/layout/images/quantum_leap/footer-social-icons_facebook.png

  • file https://paypalobjects.com/digitalassets/c/system-triggered-email/n/layout/images/quantum_leap/footer-social-icons_instagram.png

  • file https://paypalobjects.com/digitalassets/c/system-triggered-email/n/layout/images/quantum_leap/footer-social-icons_linkedin.png

  • file https://t.paypal.com/ts?v=1&amp;utm_source=unp&amp;utm_medium=email&amp;utm_campaign=RT000093&amp;utm_unptid=90871015-c51d-11f1-b75c-859d0deb2266&amp;ppid=RT000093&amp;cnac=US&amp;rsta=en_US%28en-US%29&amp;cust=HXNASM6UZC9WS&amp;unptid=90871015-c51d-11f1-b75c-859d0deb2266&amp;calc=a944778fd1cf1&amp;unp_tpcid=CardExpiryWarning&amp;page=main%3Aemail%3ART000093&amp;pgrp=main%3Aemail&amp;e=op&amp;mchn=em&amp;s=ci&amp;mail=sys&amp;appVersion=1.447.0&amp;tenant_name=PAYPAL&amp;xt=185428%2C182450%2C185426%2C175543%2C104038%2C183981%2C184725%2C180509&amp;xe=115153%2C114833%2C115152%2C114002%2C101255%2C114941%2C115052%2C114543&amp;link_ref=t.paypal.com_ts

  • file https://t.paypal.com/ts?v=1&utm_source=unp&utm_medium=email&utm_campaign=RT000093&utm_unptid=90871015-c51d-11f1-b75c-859d0deb2266&ppid=RT000093&cnac=US&rsta=en_US%28en-US%29&cust=HXNASM6UZC9WS&unptid=90871015-c51d-11f1-b75c-859d0deb2266&calc=a944778fd1cf1&unp_tpcid=CardExpiryWarning&page=main%3Aemail%3ART000093&pgrp=main%3Aemail&e=op&mchn=em&s=ci&mail=sys&appVersion=1.447.0&tenant_name=PAYPAL&xt=185428%2C182450%2C185426%2C175543%2C104038%2C183981%2C184725%2C180509&xe=115153%2C114833%2C115152%2C114002%2C101255%2C114941%2C115052%2C114543&link_ref=t.paypal.com_ts

  • file https://twitter.com/PayPal?v=1%2C0.1&amp;utm_source=unp&amp;utm_medium=email&amp;utm_campaign=RT000093&amp;utm_unptid=90871015-c51d-11f1-b75c-859d0deb2266&amp;ppid=RT000093&amp;cnac=US&amp;rsta=en_US%28en-US%29&amp;cust=HXNASM6UZC9WS&amp;unptid=90871015-c51d-11f1-b75c-859d0deb2266&amp;calc=a944778fd1cf1&amp;unp_tpcid=CardExpiryWarning&amp;page=main%3Aemail%3ART000093&amp;pgrp=main%3Aemail&amp;e=re&amp;mchn=em&amp;s=ci&amp;mail=sys&amp;appVersion=1.447.0&amp;tenant_name=PAYPAL&amp;xt=185428%2C182450%2C185426%2C175543%2C104038%2C183981%2C184725%2C180509&amp;xe=115153%2C114833%2C115152%2C114002%2C101255%2C114941%2C115052%2C114543&amp;link_ref=twitter.com_paypal

  • Show all