General

  • Target
    phish_alert_sp2_2.0.0.0 (3).eml
  • Size 3.3MB
  • Sample261014-ppntjs114n
  • SHA256 09b98016dd640f32a74295a14b55015770884d136aeb8a21fd139edc8b8c67f0
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • Malformed data in PDF

    A PDF can contain malformed data to evade detection

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

File Explorer

  • phish_alert_sp2_2.0.0.0 (3).eml
    .eml 3.3MB
  • TenEX SPE Oman SandBOND Paper 2026.pdf
    .pdf 1.4MB
  • email-html-1.txt
    .html 24KB
  • image447178.png
    .png 46KB
  • image515527.png
    .png 642B
  • image831584.png
    .png 46KB
  • image971045.png
    .png 642B
  • spe-0626-0004-jpt.pdf
    .pdf 845KB

phish_alert_sp2_2.0.0.0 (3).eml

  • SHA256 09b98016dd640f32a74295a14b55015770884d136aeb8a21fd139edc8b8c67f0
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

In-Reply-To

CO1PR10MB4707CAAACC6538E1BD73B74DA4932@CO1PR10MB4707.namprd10.prod.outlook.com

Return-Path

[email protected]

Date

Tue, 13 Oct 2026 21:03:11 +0000

Subject

=?UTF-8?B?W0VYVEVSTkFMXSBSZTogRXhwbG9yaW5nIE5hbm8gUGFydGljbGUg?= =?UTF-8?B?dGVjaG5vbG9neSBmb3IgUHJvZHVjdGlvbiBFbmhhbmNlbWVudA==?=

Content-Type

multipart/mixed; boundary="----sinikael-?=_1-17919678306920.7343332749427092"

Received

from BL3PR16MB4337.namprd16.prod.outlook.com (::1) by LV8PR16MB6237.namprd16.prod.outlook.com with HTTPS; Tue, 13 Oct 2026 21:03:50 +0000

from BY3PR10CA0006.namprd10.prod.outlook.com (2603:10b6:a03:255::11) by BL3PR16MB4337.namprd16.prod.outlook.com (2603:10b6:208:33c::12) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.522.12; Tue, 13 Oct 2026 21:03:21 +0000

from SJ1PEPF00002316.namprd03.prod.outlook.com (2603:10b6:a03:255:cafe::66) by BY3PR10CA0006.outlook.office365.com (2603:10b6:a03:255::11) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.496.5 via Frontend Transport; Tue, 13 Oct 2026 21:03:21 +0000

from MW6PR02CU001.outbound.protection.outlook.com (2a01:111:f403:c007::2) by SJ1PEPF00002316.mail.protection.outlook.com (2603:10b6:a0f:fc02::1aa) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.522.6 via Frontend Transport; Tue, 13 Oct 2026 21:03:20 +0000

from BY5PR04CA0014.namprd04.prod.outlook.com (2603:10b6:a03:1d0::24) by PH7PR10MB7694.namprd10.prod.outlook.com (2603:10b6:510:2e5::16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.522.12; Tue, 13 Oct 2026 21:03:16 +0000

from EA8PEPF00000006.namprd05.prod.outlook.com (2603:10b6:a03:1d0:cafe::4e) by BY5PR04CA0014.outlook.office365.com (2603:10b6:a03:1d0::24) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.472.20 via Frontend Transport; Tue, 13 Oct 2026 21:03:16 +0000

from us2.smtp.exclaimer.net (104.209.35.28) by EA8PEPF00000006.mail.protection.outlook.com (10.167.249.229) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.522.6 via Frontend Transport; Tue, 13 Oct 2026 21:03:15 +0000

from PH0PR07CU006.outbound.protection.outlook.com (40.93.23.94) by us2.smtp.exclaimer.net (104.209.35.28) with Exclaimer Signature Manager ESMTP Proxy us2.smtp.exclaimer.net (tlsversion=TLS12, tlscipher=TLS_DIFFIEHELLMAN_WITH_AES256_NONE); Tue, 13 Oct 2026 21:03:16 +0000

from PH0PR10MB4712.namprd10.prod.outlook.com (2603:10b6:510:3f::7) by LV3PR10MB8012.namprd10.prod.outlook.com (2603:10b6:408:28a::6) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.522.12; Tue, 13 Oct 2026 21:03:12 +0000

from PH0PR10MB4712.namprd10.prod.outlook.com ([fe80::9097:41b8:a7c8:9836]) by PH0PR10MB4712.namprd10.prod.outlook.com ([fe80::9097:41b8:a7c8:9836%3]) with mapi id 15.21.0522.008; Tue, 13 Oct 2026 21:03:11 +0000

Received-Spf

Pass (protection.outlook.com: domain of tenextechnologies.com designates 2a01:111:f403:c007::2 as permitted sender) receiver=protection.outlook.com; client-ip=2a01:111:f403:c007::2; helo=MW6PR02CU001.outbound.protection.outlook.com; pr=C

Fail (protection.outlook.com: domain of tenextechnologies.com does not designate 104.209.35.28 as permitted sender) receiver=protection.outlook.com; client-ip=104.209.35.28; helo=us2.smtp.exclaimer.net;

Message-Id

<PH0PR10MB4712DDFF561C99C9FD810DACA49E2@PH0PR10MB4712.namprd10.prod.outlook.com>

Extracted URLs

  • file https://aka.ms/LearnAboutSenderIdentification

  • file https://www.linkedin.com/company/tenextechnologies

  • file https://www.tenextechnologies.com/