Static

static

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    phish_alert_sp2_2.0.0.0.eml
  • Size 677KB
  • Sample261014-ct6tpsxtcy
  • SHA256 e1ed873644530a668c1fe442ca4294dd88980b262db565b9ca4cb6b350bd1781
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • phish_alert_sp2_2.0.0.0.eml
    .eml 677KB
  • AtlanticTankSalesLogo.jpg
    .jpg 71KB
  • Hilcorp Creola AL.jpg
    .jpg 403KB
  • email-html-1.txt
    .html 10KB

phish_alert_sp2_2.0.0.0.eml

  • SHA256 e1ed873644530a668c1fe442ca4294dd88980b262db565b9ca4cb6b350bd1781
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

[email protected]

Date

Mon, 12 Oct 2026 13:03:00 +0000

Subject

=?UTF-8?B?W0VYVEVSTkFMXSBIaWxjb3JwIFF1ZXN0aW9uIHlvdXIgbGFyZ2Ug?= =?UTF-8?B?cHJvcGFuZSB0YW5rcyBhdCBwbGFudA==?=

Content-Type

multipart/mixed; boundary="----sinikael-?=_1-17919439570770.06973914382388224"

Received

from MW3PR16MB3771.namprd16.prod.outlook.com (2603:10b6:303:4c::15) by LV3PR16MB6319.namprd16.prod.outlook.com with HTTPS; Mon, 12 Oct 2026 13:03:23 +0000

from BY5PR03CA0016.namprd03.prod.outlook.com (2603:10b6:a03:1e0::26) by MW3PR16MB3771.namprd16.prod.outlook.com (2603:10b6:303:4c::15) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.496.21; Mon, 12 Oct 2026 13:03:17 +0000

from SJ1PEPF00001CDF.namprd05.prod.outlook.com (2603:10b6:a03:1e0:cafe::e) by BY5PR03CA0016.outlook.office365.com (2603:10b6:a03:1e0::26) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.496.5 via Frontend Transport; Mon, 12 Oct 2026 13:03:17 +0000

from PH8PR06CU001.outbound.protection.outlook.com (2a01:111:f403:c107::1) by SJ1PEPF00001CDF.mail.protection.outlook.com (2603:10b6:a0f:fc02::107) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.522.6 via Frontend Transport; Mon, 12 Oct 2026 13:03:17 +0000

from SJ0PR13MB5548.namprd13.prod.outlook.com (2603:10b6:a03:421::5) by SN4PR13MB5280.namprd13.prod.outlook.com (2603:10b6:806:207::16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.496.21; Mon, 12 Oct 2026 13:03:01 +0000

from SJ0PR13MB5548.namprd13.prod.outlook.com ([fe80::4e02:3e29:d1db:18b8]) by SJ0PR13MB5548.namprd13.prod.outlook.com ([fe80::4e02:3e29:d1db:18b8%3]) with mapi id 15.21.0496.020; Mon, 12 Oct 2026 13:03:01 +0000

Received-Spf

Pass (protection.outlook.com: domain of storagetankspropane.com designates 2a01:111:f403:c107::1 as permitted sender) receiver=protection.outlook.com; client-ip=2a01:111:f403:c107::1; helo=PH8PR06CU001.outbound.protection.outlook.com; pr=C

Message-Id

<SJ0PR13MB5548A070F109DD7A8A242DF8BF9F2@SJ0PR13MB5548.namprd13.prod.outlook.com>

Extracted URLs

  • file https://aka.ms/LearnAboutSenderIdentification