General

  • Target
    phish_alert_sp2_2.0.0.0 (1).eml
  • Size 3.8MB
  • Sample261014-rt4fxats5n
  • SHA256 f34fc3059a9b8f92ef5646aca13d6ec78255f03dec5540ded73ad311e8e421a9
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • phish_alert_sp2_2.0.0.0 (1).eml
    .eml 3.8MB
  • FR & Non-FR Order Form 2026.xlsx
    .xlsx 2.7MB
  • email-html-1.txt
    .html 11KB

phish_alert_sp2_2.0.0.0 (1).eml

  • SHA256 f34fc3059a9b8f92ef5646aca13d6ec78255f03dec5540ded73ad311e8e421a9
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

[email protected]

Date

Mon, 12 Oct 2026 18:06:38 +0000

Subject

=?UTF-8?B?W0VYVEVSTkFMXSBGUiAmIE5vbi1GUiBPcmRlciBmb3JtIDIwMjY=?=

Content-Type

multipart/mixed; boundary="----sinikael-?=_1-17919869908180.06732019302787828"

Received

from CH3PR16MB5372.namprd16.prod.outlook.com (::1) by LV0PR16MB6841.namprd16.prod.outlook.com with HTTPS; Mon, 12 Oct 2026 18:08:05 +0000

from CH0PR13CA0057.namprd13.prod.outlook.com (2603:10b6:610:b2::32) by CH3PR16MB5372.namprd16.prod.outlook.com (2603:10b6:610:165::5) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.496.21; Mon, 12 Oct 2026 18:06:51 +0000

from DS2PEPF000061C6.namprd02.prod.outlook.com (2603:10b6:610:b2:cafe::9d) by CH0PR13CA0057.outlook.office365.com (2603:10b6:610:b2::32) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.522.4 via Frontend Transport; Mon, 12 Oct 2026 18:06:51 +0000

from BN1PR04CU002.outbound.protection.outlook.com (2a01:111:f403:c110::1) by DS2PEPF000061C6.mail.protection.outlook.com (2603:10b6:f:fc00::219) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.522.6 via Frontend Transport; Mon, 12 Oct 2026 18:06:50 +0000

from IA6PR20MB994519.namprd20.prod.outlook.com (2603:10b6:208:5dd::18) by SA1PR20MB7041.namprd20.prod.outlook.com (2603:10b6:806:3a4::5) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.496.23; Mon, 12 Oct 2026 18:06:38 +0000

from IA6PR20MB994519.namprd20.prod.outlook.com ([fe80::abce:fe18:de17:196a]) by IA6PR20MB994519.namprd20.prod.outlook.com ([fe80::abce:fe18:de17:196a%5]) with mapi id 15.21.0496.021; Mon, 12 Oct 2026 18:06:38 +0000

Received-Spf

Pass (protection.outlook.com: domain of cci-industrial.com designates 2a01:111:f403:c110::1 as permitted sender) receiver=protection.outlook.com; client-ip=2a01:111:f403:c110::1; helo=BN1PR04CU002.outbound.protection.outlook.com; pr=C

Message-Id

<IA6PR20MB9945197FF172EBAF2D3BA09E58869F2@IA6PR20MB994519.namprd20.prod.outlook.com>

Extracted URLs

  • file https://aka.ms/LearnAboutSenderIdentification