Resubmissions

20/10/2026, 11:41

261020-ntp2qsyzhy8

20/10/2026, 11:20

261020-nfyfysgz4y8

General

  • Target
    Re_ Release of Information 3 - Max Whitehead ([email protected]) - 2026-03-27 1219.eml
  • Size 11.9MB
  • Sample261020-ntp2qsyzhy
  • SHA256 d4a083bce24a3a2a33f4dc198ec7ed43fa3d13676594d28f83dc19e8caac467a
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

  • One or more email addresses in PDF identified

    Detects presence of email addresses in PDF files.

File Explorer

  • Re_ Release of Information 3 - Max Whitehead ([email protected]) - 2026-03-27 1219.eml
    .eml 11.9MB
  • Draft JC ERA Employment Problem.docx
    .docx 11KB
  • ERA Problem Statement.docx.pdf
    .pdf 83KB
  • Gmail - Driver Licence Access Log Request- Jason Peter Clayton.pdf
    .pdf 141KB
  • JC_ERA_Draft (1).docx
    .docx 35KB
  • Metadata-Formal Disciplinary Hearing.json-metadata.pdf
    .pdf 226KB
  • Revised ERA Application 090226.docx
    .docx 18KB
  • Revised ERA Application.docx
    .docx 18KB
  • SETTLEMENT_ Fraudulent Dismissal.docx.pdf
    .pdf 80KB
  • attachment-10
    .eml 16KB
  • email-html-2.txt
    .html 6KB
  • email-plain-1.txt
    2KB
  • attachment-11
    .eml 6.3MB
  • DOCUMENT 1_ Statement of Problem.pdf
    .pdf 54KB
  • DOCUMENT 2 Urgent Re instatement.pdf
    .pdf 53KB
  • J Clayton Certificate of License Particulars.pdf
    .pdf 565KB
  • Jason Clayton - Letter in Response.pdf
    .pdf 3.8MB
  • Response- Mark 21_1 letter.docx.pdf
    .pdf 105KB
  • Undertaking as to Damages.pdf
    .pdf 43KB
  • email-html-2.txt
    .html 16KB
  • email-plain-1.txt
    2KB
  • attachment-12
    .eml 1.9MB
  • attachment-13
    .eml 188KB
  • attachment-3
    .eml 10KB
  • attachment-4
    .eml 54KB
  • attachment-5
    .eml 2.2MB
  • attachment-6
    .eml 11KB
  • attachment-7
    .eml 42KB
  • attachment-8
    .eml 229KB
  • attachment-9
    .eml 27KB
  • email-html-2.txt
    .html 24KB
  • email-plain-1.txt
    6KB
  • image001.jpg
    .jpg 1KB

Re_ Release of Information 3 - Max Whitehead ([email protected]) - 2026-03-27 1219.eml

  • SHA256 d4a083bce24a3a2a33f4dc198ec7ed43fa3d13676594d28f83dc19e8caac467a
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Delivered-To

[email protected]

In-Reply-To

[email protected]

Return-Path

<[email protected]>

Date

Thu, 26 Mar 2026 23:19:43 +0000

Subject

RE: Release of Information 3

Content-Type

multipart/mixed; boundary="_024_da4bf124376a4451a739cc61a9114c2awhiteheadgroupconz_"

Received

by 2002:a05:7208:60cf:b0:ff:9213:2b8b with SMTP id k15csp1523815rba; Thu, 26 Mar 2026 16:21:04 -0700 (PDT)

from mx02a.onenet.co.nz (mx02a.onenet.co.nz. [103.241.88.42]) by mx.google.com with ESMTPS id 41be03b00d2f7-c7673a66a92si7669595a12.316.2026.03.26.16.19.54 for <[email protected]> (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 26 Mar 2026 16:21:02 -0700 (PDT)

from ONENETEX10.services.onenet.co.nz (Not Verified[10.10.8.21]) by mx02a.onenet.co.nz with OneNet Message Protect (using TLS: TLSv1.2, AES256-GCM-SHA384) id <B69c5bf110001>; Fri, 27 Mar 2026 12:19:45 +1300

from ONENETEX20.services.onenet.co.nz (10.10.8.31) by ONENETEX10.services.onenet.co.nz (10.10.8.36) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2507.58; Fri, 27 Mar 2026 12:19:43 +1300

from ONENETEX20.services.onenet.co.nz ([fe80::2cb9:6bfa:8264:5ac2]) by ONENETEX20.services.onenet.co.nz ([fe80::2cb9:6bfa:8264:5ac2%4]) with mapi id 15.01.2507.058; Fri, 27 Mar 2026 12:19:43 +1300

X-Received

by 2002:a17:90b:1d4c:b0:35b:e551:e776 with SMTP id 98e67ed59e1d1-35c3010e291mr346449a91.27.1774567263593; Thu, 26 Mar 2026 16:21:03 -0700 (PDT)

Received-Spf

pass (google.com: domain of [email protected] designates 103.241.88.42 as permitted sender) client-ip=103.241.88.42;

Message-Id

<[email protected]>

Extracted URLs

  • file http://www.whiteheadgroup.co.nz