Overview

overview

3

Static

static

1

Fw Externa...ts.msg

windows11-21h2-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    Fw External Fw Updated AireSpring Advantage Escalation Contact List - Your Support Contacts.msg
  • Size 334KB
  • Sample261012-xpbg8aws8k
  • SHA256 1bcec2dbf46b2ac86d64675ba560c71cd92621fce07ad2ee55a86af650868bac
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • Fw External Fw Updated AireSpring Advantage Escalation Contact List - Your Support Contacts.msg
    .msg 334KB
  • image.png
    .png 89KB
  • image002.jpg
    .jpg 823B

Fw External Fw Updated AireSpring Advantage Escalation Contact List - Your Support Contacts.msg

  • SHA256 1bcec2dbf46b2ac86d64675ba560c71cd92621fce07ad2ee55a86af650868bac
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

In-Reply-To

BN0P221MB0656629B2A07F20648DCC0E28B922@BN0P221MB0656.NAMP221.PROD.OUTLOOK.COM

Return-Path

<>

Date

Mon, 12 Oct 2026 15:09:35 +0000

Subject

Fw: [External] Fw: Updated AireSpring Advantage Escalation Contact List - Your Support Contacts

Content-Type

multipart/related; boundary="_008_SA1P221MB1497AC4C0A8BE9D21C32DD5BE79F2SA1P221MB1497NAMP_"; type="multipart/alternative"

Received

from IA4P221MB2054.NAMP221.PROD.OUTLOOK.COM (2603:10b6:208:56f::16) by LV8P221MB1542.NAMP221.PROD.OUTLOOK.COM with HTTPS; Mon, 12 Oct 2026 15:10:03 +0000

from SJ0PR13CA0169.namprd13.prod.outlook.com (2603:10b6:a03:2c7::24) by IA4P221MB2054.NAMP221.PROD.OUTLOOK.COM (2603:10b6:208:56f::16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.496.21; Mon, 12 Oct 2026 15:09:59 +0000

from MWH0EPF000C6191.namprd02.prod.outlook.com (2603:10b6:a03:2c7:cafe::60) by SJ0PR13CA0169.outlook.office365.com (2603:10b6:a03:2c7::24) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.522.4 via Frontend Transport; Mon, 12 Oct 2026 15:09:58 +0000

from us.cloud-sec-av.com (18.97.17.224) by MWH0EPF000C6191.mail.protection.outlook.com (10.167.249.106) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.522.6 via Frontend Transport; Mon, 12 Oct 2026 15:09:57 +0000

from emails-2245036-28-mt-prod-cp-us-2.checkpointcloudsec.com (ip-10-10-174-199.ec2.internal [10.10.174.199]) by mta-outgoing-internal-831-mt-prod-cp-us-2.checkpointcloudsec.com (Postfix) with ESMTPS id 159CF7E620; Mon, 12 Oct 2026 15:09:57 +0000 (UTC)

from SA1P221MB1497.NAMP221.PROD.OUTLOOK.COM (2603:10b6:806:3e5::19) by IA3P221MB2060.NAMP221.PROD.OUTLOOK.COM (2603:10b6:208:576::19) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.496.21; Mon, 12 Oct 2026 15:09:36 +0000

from SA1P221MB1497.NAMP221.PROD.OUTLOOK.COM ([fe80::7445:51a5:f407:c0a2]) by SA1P221MB1497.NAMP221.PROD.OUTLOOK.COM ([fe80::7445:51a5:f407:c0a2%4]) with mapi id 15.21.0496.019; Mon, 12 Oct 2026 15:09:36 +0000

Received-Spf

Pass (protection.outlook.com: domain of us.cloud-sec-av.com designates 18.97.17.224 as permitted sender) receiver=protection.outlook.com; client-ip=18.97.17.224; helo=us.cloud-sec-av.com; pr=C

Message-Id

<SA1P221MB1497AC4C0A8BE9D21C32DD5BE79F2@SA1P221MB1497.NAMP221.PROD.OUTLOOK.COM>

Extracted URLs

  • file http://Airespring.com

  • file http://airespring.com

  • file http://palatine.il.us

  • file http://www.airespring.com

  • file https://airespring.com

  • file https://airespring.com/...

  • file https://protect.checkpoint.com/v2/r01/___https://airespring.com/___.YzJ1OmFpcmVzcHJpbmdjb25zdW1lcjE6YzpvOmU5YWZlNmI3YTk2ZDVkMWIzNTFhY2MxNTRiMjRkZmJkOjc6N2YzMTpmOGY0MmIzZGQ4ZGU5ZDNkNDA0ZWM3NmQzNjYwMGJlNTk4NDA1YmNmMmEyNDY0OWIyNDQ3NTM1NDY2NDVmZmYwOmg6RjpU

  • file https://protect.checkpoint.com/v2/r01/___https://secure.campaigner.com/hxgdUzgqnhdxmtBdljh7-i8BBE--8kcshg-oCi7mmb___.YzJ1OmFpcmVzcHJpbmdjb25zdW1lcjE6YzpvOmQzMTIxODlkNzhlMjQzYjc2ODU3YWQ3NGI0Y2ViOWNjOjc6MDQzNzo2YWQyMWYxOTEwOTZlMmFiYWUxZmJiYTBkYmZlOTdjZDRiYTE2ZWQyYTA5OTY1MDUyYjJlNThlNzNiYjc0MGRjOmg6RjpU

  • file https://protect.checkpoint.com/v2/r01/___https://trk3.cp20.com/hqnhpdljh7-i8BBE-ncl5bs-oCi7mm/d___.YzJ1OmFpcmVzcHJpbmdjb25zdW1lcjE6YzpvOmQzMTIxODlkNzhlMjQzYjc2ODU3YWQ3NGI0Y2ViOWNjOjc6MzllNzoyZDkwZTE4MGMxNzk2Y2RjZTBjMjAxMjJiMmJkYTBmYzJkZjk4OWQwZTEwZGJjNzhjYjgwZWFkYjRiM2MxZWZiOmg6RjpU

  • Show all