Static

static

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    phish_alert_sp2_2.0.0.0 (1).eml
  • Size 287KB
  • Sample261020-psbcmabd95
  • SHA256 3fc29cd8e76e24b75b5d31136bfb2d84c388ece420e910440c679c0666d5d1b8
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • phish_alert_sp2_2.0.0.0 (1).eml
    .eml 287KB
  • Undeliverable: RE: Arctic Gear.eml
    .eml 199KB
  • attachment-1
    122KB
  • email-plain-1.txt
    225B

phish_alert_sp2_2.0.0.0 (1).eml

  • SHA256 3fc29cd8e76e24b75b5d31136bfb2d84c388ece420e910440c679c0666d5d1b8
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

In-Reply-To

SA1PR16MB4804ACF55740A10553FFBC53A3672@SA1PR16MB4804.namprd16.prod.outlook.com

Return-Path

<>

Date

Tue, 20 Oct 2026 03:02:09 -0800

Subject

=?UTF-8?B?W0VYVEVSTkFMXSBVbmRlbGl2ZXJhYmxlOiBSRTogQXJjdGljIEdl?= =?UTF-8?B?YXI=?=

Content-Type

multipart/mixed; boundary="----sinikael-?=_1-17924959817030.08617151921833432"

Received

from SA7PR16MB935060.namprd16.prod.outlook.com (2603:10b6:806:4cf::7) by SA1PR16MB4804.namprd16.prod.outlook.com with HTTPS; Tue, 20 Oct 2026 11:02:18 +0000

from BN9PR03CA0801.namprd03.prod.outlook.com (2603:10b6:408:13f::26) by SA7PR16MB935060.namprd16.prod.outlook.com (2603:10b6:806:4cf::7) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.522.19; Tue, 20 Oct 2026 11:02:15 +0000

from BN3PEPF0000B373.namprd21.prod.outlook.com (2603:10b6:408:13f:cafe::3c) by BN9PR03CA0801.outlook.office365.com (2603:10b6:408:13f::26) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.522.19 via Frontend Transport; Tue, 20 Oct 2026 11:02:14 +0000

from CH5PR02CU005.outbound.protection.outlook.com (52.102.146.41) by BN3PEPF0000B373.mail.protection.outlook.com (10.167.243.170) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.569.0 via Frontend Transport; Tue, 20 Oct 2026 11:02:14 +0000

from DM6PR02CA0119.namprd02.prod.outlook.com (2603:10b6:5:1b4::21) by DSVPR14MB958844.namprd14.prod.outlook.com (2603:10b6:8:3e0::14) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.546.14; Tue, 20 Oct 2026 11:02:11 +0000

from DM3PEPF000265BC.namprd04.prod.outlook.com (2603:10b6:5:1b4:cafe::86) by DM6PR02CA0119.outlook.office365.com (2603:10b6:5:1b4::21) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.522.20 via Frontend Transport; Tue, 20 Oct 2026 11:02:11 +0000

from mail.nmsusa.com (74.124.124.34) by DM3PEPF000265BC.mail.protection.outlook.com (10.167.23.249) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.546.15 via Frontend Transport; Tue, 20 Oct 2026 11:02:10 +0000

Received-Spf

Pass (protection.outlook.com: domain of CH5PR02CU005.outbound.protection.outlook.com designates 52.102.146.41 as permitted sender) receiver=protection.outlook.com; client-ip=52.102.146.41; helo=CH5PR02CU005.outbound.protection.outlook.com; pr=C

None (protection.outlook.com: mail.nmsusa.com does not designate permitted sender hosts)

Message-Id

<[email protected]>

Extracted URLs

  • file https://aka.ms/LearnAboutSenderIdentification