Overview

overview

7

Static

static

1

Potential ...B).msg

windows10-2004-x64

7

Potential ...B).msg

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    Potential Phish (75.7 KB).msg
  • Size 90KB
  • Sample261020-r2txfast3p
  • SHA256 6ca92a6805450840de36d8345d426b5770285c491cfafa7d5892210a10f544a4
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • Potential Phish (75.7 KB).msg
    .msg 90KB

Potential Phish (75.7 KB).msg

  • SHA256 6ca92a6805450840de36d8345d426b5770285c491cfafa7d5892210a10f544a4
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Delivered-To

[email protected]

Return-Path

jennifer_lopez_peterson+[email protected]

Date

Tue, 20 Oct 2026 05:05:59 -0700

Subject

Your review is making a difference

Content-Type

multipart/alternative; boundary="===============7362582081030953102=="

Received

from SA1PR04MB9042.namprd04.prod.outlook.com (2603:10b6:806:388::12) by PH8PR04MB8592.namprd04.prod.outlook.com with HTTPS; Tue, 20 Oct 2026 12:06:10 +0000

from PH7P220CA0166.NAMP220.PROD.OUTLOOK.COM (2603:10b6:510:33b::13) by SA1PR04MB9042.namprd04.prod.outlook.com (2603:10b6:806:388::12) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.522.19; Tue, 20 Oct 2026 12:06:04 +0000

from MW3PEPF00001658.namprd21.prod.outlook.com (2603:10b6:510:33b:cafe::5b) by PH7P220CA0166.outlook.office365.com (2603:10b6:510:33b::13) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.522.4 via Frontend Transport; Tue, 20 Oct 2026 12:06:03 +0000

from mx0b-00332601.pphosted.com (148.163.137.252) by MW3PEPF00001658.mail.protection.outlook.com (10.167.249.202) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.569.0 via Frontend Transport; Tue, 20 Oct 2026 12:06:03 +0000

from pps.filterd (m0266390.ppops.net [127.0.0.1]) by mx0a-00332601.pphosted.com (8.18.1.11/8.18.1.11) with ESMTP id 69K9nZZC2729569 for <[email protected]>; Tue, 20 Oct 2026 12:06:02 GMT

from mail-yx1-f49.google.com (mail-yx1-f49.google.com [74.125.224.49]) by mx0a-00332601.pphosted.com (PPS) with ESMTPS id 4hdw63ryxm-1 (version=TLSv1.3 cipher=TLS_AES_128_GCM_SHA256 bits=128 verify=NOT) for <[email protected]>; Tue, 20 Oct 2026 12:06:02 +0000 (GMT)

by mail-yx1-f49.google.com with SMTP id 956f58d0204a3-677dbe051d4so2771376d50.0 for <[email protected]>; Tue, 20 Oct 2026 05:06:02 -0700 (PDT)

by 2002:a05:6236:708f:b0:1e6:298a:838c with SMTP id 15csp2653703ggb; Tue, 20 Oct 2026 05:05:59 -0700 (PDT)

from mail-sor-f69.google.com (mail-sor-f69.google.com. [209.85.220.69]) by mx.google.com with SMTPS id d75a77b69052e-536863e0c6dsor22308931cf.8.2026.10.20.05.05.59 for <[email protected]> (Google Transport Security); Tue, 20 Oct 2026 05:05:59 -0700 (PDT)

X-Received

by 2002:a05:690e:4807:b0:679:9971:e851 with SMTP id 956f58d0204a3-679ca4d5891mr1815198d50.2.1792497961497; Tue, 20 Oct 2026 05:06:01 -0700 (PDT)

by 2002:ac8:5e0a:0:b0:536:5e62:4647 with SMTP id d75a77b69052e-5365e624e86mr123177151cf.16.1792497959762; Tue, 20 Oct 2026 05:05:59 -0700 (PDT)

by 2002:a05:622a:592:b0:536:697f:5e1a with SMTP id d75a77b69052e-536697fa1e0mr95134861cf.59.1792497959289; Tue, 20 Oct 2026 05:05:59 -0700 (PDT)

Received-Spf

Pass (protection.outlook.com: domain of g.gcpsk12.org designates 148.163.137.252 as permitted sender) receiver=protection.outlook.com; client-ip=148.163.137.252; helo=mx0b-00332601.pphosted.com; pr=C

pass (google.com: domain of 3j1nxahmkajq4cc492-aydg-bcf2d9m4cc492.0ca@scoutcamp.bounces.google.com designates 209.85.220.69 as permitted sender) client-ip=209.85.220.69;

Message-Id

<b44cab799a0f49ca83f9f418e0aeb7305d8db46e-864000-111562056@google.com>

Extracted URLs

  • file http://www.w3.org

  • file https://c.gle/AAuDWvkIWmXe063Lb6uo2bDyjTgrcT5LjtryMG66ft2UVTbYOE1Z1xemghpXy_Ud58floXq4AgAS4c1hsHgQ4b9BAuVkmKZbi_dQZ_LLIGL6lX0HDt-DAHJEcVcoh_UCZBqB6K5Trb4Vzjp7MvnCdoHQFZrRs0NtMDdhkNTkHGRSYZwIjTMJljq8VI2EsaNf02JM8URWzE9f8NRa_12H2cFXA35INEuSIRJF8Zhwuc3TE_pl

  • file https://c.gle/AAuDWvlPuAnZ_VKDxTJTD51VAMhtEem4HVLPSqJ-sJ2sTqAlxMI7lLdKvLjfy78PG4BnCH7YlwAtQ2IBH_kdidMt42FsNR-dVojXvRcCuiOVhVMuKoO2ymcSL2_7xL3aFsxPTlh9tMYAe68

  • file https://c.gle/AAuDWvm5YMAUt_G-2lwFk0xFZzp5pzEQkBwUEtkwZRJa6cb25teOnLjsKfWD_mwpdEsgFZskugcjoTd7zAykAFx8Gq6lfODVv5PQC73eKrXsueF5r3cUOw-lCVq2tT5QTz_0CMODXS5e9REvQwgbJpRdJpA24X5FmQ2a3YSeXnBy

  • file https://c.gle/AAuDWvn_3iC0HeBGwcj_LDdXsTbn3fkH7zzhxpdKFNkOBey0QN0Y8AsHK4rnSGCkoIi_e9faVezSlxMAOLtB5NOGj7n3_H6JrKaeGRXG2f9jnfdWsSeYqZQuMGt1FtjcblRetRo8P9IPNdRBHI7TsbBIvbJq55EIyuZtB-nHm8QtETfDAg

  • file https://gstatic.com/growthlab/api/gmNIjHPFpmOEGG3VeXADifdAiC08ALoOADnvzNrC.png

  • file https://gstatic.com/growthlab/api/gmNIjHPFpmOEGG3VeXADifdAiC08ALoOADnvzNrC.png);

  • file https://gstatic.com/growthlab/api/wxCR6FiV46YbyF5xpw8VSWm33vgqQ5Baf71ZI659.png

  • file https://lh3.googleusercontent.com/a/ACg8ocJXFI85nFGK8U6w7XELlGulQ4tE_-Bk8Z9Rn5Pcr7FatLr3EA=mo

  • Show all