phish_alert_sp2_2[.]0[.]0[.]0 - 2026-10-14T142618[.]596[.]eml

General

Target
phish_alert_sp2_2.0.0.0 - 2026-10-14T142618.596.eml
Size 18KB
Sample261014-pptpssc14w
SHA256 6e1207c4f843dd20ab92e8c1a7083148eff843344efdadef31d88bc35db5b1a9
MD5 bced1704d32ae22b37b90b9009538b2e
SHA1 50511af3a66664747db927e4487c32e519032a21
SHA512 0d5a463d76c399e1e564283c5a260a6263efc238bac3eb029d36ddafc6b74984a7a6d794bbb4650ecec2da1be7d1848124ce410e0569c20e5326a930e6fcefeb
SSDEEP 192:mKB8dBqc9YxrkCQiKJHJ0RbwWNKENKXNKNNKr9hUc+ANk9Zd0LaI79ZB4x:mzqxoCQiKJHJNN98d0n9ZBe
TLSH
T11A824AE21E63A479E8BB60FA5C11BD8992B17C97A07745C0BC5520732ACF4EA571338E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

phish_alert_sp2_2.0.0.0 - 2026-10-14T142618.596.eml

.eml 18KB
email-html-2.txt

.html 3KB
email-plain-1.txt

639B

phish_alert_sp2_2.0.0.0 - 2026-10-14T142618.596.eml

SHA256 6e1207c4f843dd20ab92e8c1a7083148eff843344efdadef31d88bc35db5b1a9
MD5 bced1704d32ae22b37b90b9009538b2e
SHA1 50511af3a66664747db927e4487c32e519032a21
SHA512 0d5a463d76c399e1e564283c5a260a6263efc238bac3eb029d36ddafc6b74984a7a6d794bbb4650ecec2da1be7d1848124ce410e0569c20e5326a930e6fcefeb
SSDEEP 192:mKB8dBqc9YxrkCQiKJHJ0RbwWNKENKXNKNNKr9hUc+ANk9Zd0LaI79ZB4x:mzqxoCQiKJHJNN98d0n9ZBe
TLSH
T11A824AE21E63A479E8BB60FA5C11BD8992B17C97A07745C0BC5520732ACF4EA571338E
MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

To

[email protected]

From

[email protected]

Date

Tue, 13 Oct 2026 11:11:05 -0500

Subject

Partnership Agreement documents have been shared with you -Daybrook

Content-Type

multipart/alternative; boundary="----=_NextPart_000_0002_01DD5B0D.F34571E0"

Received

from JN1PEPF00001EDD.ZAFP275.PROD.OUTLOOK.COM (2603:1086:0:d0:cafe::8f) by JN3P275CA0127.outlook.office365.com (2603:1086:0:d0::11) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.382.12 via Frontend Transport; Tue, 13 Oct 2026 16:17:09 +0000

from JN3P275CA0127.ZAFP275.PROD.OUTLOOK.COM (2603:1086:0:d0::11) by JN1P275MB2565.ZAFP275.PROD.OUTLOOK.COM (2603:1086:0:a6::9) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.522.12; Tue, 13 Oct 2026 16:17:09 +0000

from za-smtp-inbound-delivery-1.mimecast.co.za (41.74.197.102) by JN1PEPF00001EDD.mail.protection.outlook.com (10.167.240.22) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.522.6 via Frontend Transport; Tue, 13 Oct 2026 16:17:07 +0000

from 127.0.0.1(mailfrom:[email protected] fp:SMTPD_4w3hSaHTqFW cluster:dm-ay35sg-a) by smtp.aliyun-inc.com(127.0.0.1); Wed, 14 Oct 2026 00:11:07 +0800

from out35-47.sg.b.dm.aliyun.com (out35-47.sg.b.dm.aliyun.com [8.219.35.47]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.3, cipher=TLS_AES_256_GCM_SHA384) id za-mta-24-RIRoMA5rPRWhM5JU1jzTgQ-1; Tue, 13 Oct 2026 16:16:49 +0000

from JN1P275MB2565.ZAFP275.PROD.OUTLOOK.COM (2603:1086:0:4e:cafe::3f) by JNAP275CA0038.outlook.office365.com (2603:1086:0:4e::9) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.496.5 via Frontend Transport; Tue, 13 Oct 2026 16:17:25 +0000

from DS2PR12MB9685.namprd12.prod.outlook.com (2603:10b6:8:27a::10) by PH9PR12MB731475.namprd12.prod.outlook.com with HTTPS; Tue, 13 Oct 2026 16:17:30 +0000

from JNAP275CA0038.ZAFP275.PROD.OUTLOOK.COM (2603:1086:0:4e::9) by DS2PR12MB9685.namprd12.prod.outlook.com (2603:10b6:8:27a::10) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.522.12; Tue, 13 Oct 2026 16:17:28 +0000

Received-Spf

Fail (protection.outlook.com: domain of biomedicaltechsas.com does not designate 41.74.197.102 as permitted sender) receiver=protection.outlook.com; client-ip=41.74.197.102; helo=za-smtp-inbound-delivery-1.mimecast.co.za

X-Mailer

Microsoft Outlook 16.0

Message-Id

<[email protected]>

Extracted URLs

file https://share.google/Z3oQ65yG7nxMkKR4s

Sharing