Static

static

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    phish_alert_sp2_2.0.0.0.eml
  • Size 44KB
  • Sample261012-y72ykazzcs
  • SHA256 0cb6d15e5aac8de223bd6691a420e629c31cddbc21739523b7e7ed09ad6ae5ef
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • phish_alert_sp2_2.0.0.0.eml
    .eml 44KB
  • email-html-1.txt
    .html 12KB
  • noname
    .png 12KB

phish_alert_sp2_2.0.0.0.eml

  • SHA256 0cb6d15e5aac8de223bd6691a420e629c31cddbc21739523b7e7ed09ad6ae5ef
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

[email protected]

Date

Mon, 12 Oct 2026 11:38:15 -0700

Subject

=?UTF-8?B?W0VYVEVSTkFMXSBRdWljayBDaGVjay1pbjogWW91ciBHb29nbGUg?= =?UTF-8?B?Q2xvdWQgU3BlY2lhbGlzdA==?=

Content-Type

multipart/mixed; boundary="----sinikael-?=_1-17918360839640.2634561537978639"

Received

from LY0PR16MB499592.namprd16.prod.outlook.com (2603:10b6:404:206::11) by PH9PR16MB189549.namprd16.prod.outlook.com with HTTPS; Mon, 12 Oct 2026 18:38:36 +0000

from CH0PR03CA0065.namprd03.prod.outlook.com (2603:10b6:610:cc::10) by LY0PR16MB499592.namprd16.prod.outlook.com (2603:10b6:404:206::11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.496.23; Mon, 12 Oct 2026 18:38:18 +0000

from BL6PEPF0002256E.namprd02.prod.outlook.com (2603:10b6:610:cc:cafe::a2) by CH0PR03CA0065.outlook.office365.com (2603:10b6:610:cc::10) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.496.5 via Frontend Transport; Mon, 12 Oct 2026 18:38:17 +0000

from mail-vk1-xa36.google.com (2607:f8b0:4864:20::a36) by BL6PEPF0002256E.mail.protection.outlook.com (2603:10b6:20f:fc04::124) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.522.6 via Frontend Transport; Mon, 12 Oct 2026 18:38:17 +0000

by mail-vk1-xa36.google.com with SMTP id 71dfb90a1353d-5e948e56b9dso450147e0c.1 for <[email protected]>; Mon, 12 Oct 2026 11:38:17 -0700 (PDT)

from 372270941817 named unknown by gmailapi.google.com with HTTPREST; Mon, 12 Oct 2026 11:38:15 -0700

from 372270941817 named unknown by gmailapi.google.com with HTTPREST; Mon, 12 Oct 2026 11:38:15 -0700

X-Received

by 2002:a05:6122:1829:b0:5c9:ef0d:155d with SMTP id 71dfb90a1353d-5e91f4ad95dmr2819297e0c.10.1791830296093; Mon, 12 Oct 2026 11:38:16 -0700 (PDT)

Received-Spf

Pass (protection.outlook.com: domain of google.com designates 2607:f8b0:4864:20::a36 as permitted sender) receiver=protection.outlook.com; client-ip=2607:f8b0:4864:20::a36; helo=mail-vk1-xa36.google.com; pr=C

Message-Id

<CAOS_=xTySCdbT=LYP_ZHwdrnOuo_JSWJrH80MMiEyfNm94FaAg@mail.gmail.com>

Extracted URLs

  • file https://aka.ms/LearnAboutSenderIdentification

  • file https://sl.cloudplatformonline.com/t/113425/sc/9caf2826-0c12-43fb-b00d-c6056b02cbf4/NB2HI4DTHIXS653XO4XGY2LONNSWI2LOFZRW63JPNFXC64DIMFXGS43SMVSWILY=/GM2DEOJXHBQTGYJWMZSTOYJVGQZTCMRTGQ2GIZBZMQYTIOJTMM3GEMRQG4ZTSYRZ/www-linkedin-com-in-phanisreed

  • file https://sl.cloudplatformonline.com/t/113425/sc/9caf2826-0c12-43fb-b00d-c6056b02cbf4/NB2HI4DTHIXS6Y3BNRSW4ZDBOIXGC4DQFZTW633HNRSS6MSFKBBWKQLVJJYDKSTIOAZFMWBW/MRQTMNRUHE2WKMBYMQ4DSZJUGVQTENLEMVQTAMLEG5SDAN3DME3DOM3DMY2GMOJV/calendar-app-google-2epceaujp5jhp2vx6

  • file https://sl.cloudplatformonline.com/t/113425/sc/9caf2826-0c12-43fb-b00d-c6056b02cbf4/NB2HI4DTHIXS6Y3BNRSW4ZDBOIXGC4DQFZTW633HNRSS6SCIG5RW62CMKAYWUOLVINDGMQ2B/GU3TCNTDMQ4WIZRSGE4WENJUGA3TONZQGE4GKZDCMQ3WCYLDGM4GKNRWGA2WIZBW/calendar-app-google-hh7cohlp1j9ucffca

  • file https://sl.cloudplatformonline.com/t/113425/sc/9caf2826-0c12-43fb-b00d-c6056b02cbf4/NB2HI4DTHIXS6Y3MN52WILTHN5XWO3DFFZRW63JPOBZGKZTFOJSW4Y3FOMXQ====/MEZDKYZSGUYDKODGGJSTIMDBGVSWKNBZGY4WIODGMYYTAMDCGNQTGNBQGI4DSZTC/cloud-google-com-preferences