Overview

overview

3

Static

static

1

Potential ...B).msg

windows10-2004-x64

3

Potential ...B).msg

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    Potential Phish (27.1 KB).msg
  • Size 54KB
  • Sample261020-rlg8psex7m
  • SHA256 c0c12e973e527b189ef7e0241970c9cca7cb4f1d65a97e345dd454abe0018351
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • Potential Phish (27.1 KB).msg
    .msg 54KB

Potential Phish (27.1 KB).msg

  • SHA256 c0c12e973e527b189ef7e0241970c9cca7cb4f1d65a97e345dd454abe0018351
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

010001a158936f2a-fda20275-01a1-41fc-927e-7d56e380f903-000000@mail.notices.dropbox.com

Date

Tue, 20 Oct 2026 09:10:19 +0000

Subject

Updates to our Terms of Service and Privacy Policy

Content-Type

multipart/alternative; boundary="===============2174974204171104931=="

Received

from PH0PR04MB8355.namprd04.prod.outlook.com (2603:10b6:510:da::13) by MN7PR04MB504904.namprd04.prod.outlook.com with HTTPS; Tue, 20 Oct 2026 09:10:26 +0000

from BN9PR03CA0158.namprd03.prod.outlook.com (2603:10b6:408:f4::13) by PH0PR04MB8355.namprd04.prod.outlook.com (2603:10b6:510:da::13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.546.15; Tue, 20 Oct 2026 09:10:23 +0000

from BL6PEPF00022575.namprd02.prod.outlook.com (2603:10b6:408:f4:cafe::97) by BN9PR03CA0158.outlook.office365.com (2603:10b6:408:f4::13) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.472.20 via Frontend Transport; Tue, 20 Oct 2026 09:10:22 +0000

from mx0b-00332601.pphosted.com (148.163.137.252) by BL6PEPF00022575.mail.protection.outlook.com (10.167.249.43) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.546.15 via Frontend Transport; Tue, 20 Oct 2026 09:10:20 +0000

from pps.filterd (m0280861.ppops.net [127.0.0.1]) by mx0a-00332601.pphosted.com (8.18.1.11/8.18.1.11) with ESMTP id 69K908eR515013 for <[email protected]>; Tue, 20 Oct 2026 09:10:20 GMT

from i92-85.smtp-out.amazonses.com (i92-85.smtp-out.amazonses.com [24.110.92.85]) by mx0a-00332601.pphosted.com (PPS) with ESMTPS id 4hdw658kfd-1 (version=TLSv1.3 cipher=TLS_AES_128_GCM_SHA256 bits=128 verify=NOT) for <[email protected]>; Tue, 20 Oct 2026 09:10:20 +0000 (GMT)

Received-Spf

SoftFail (protection.outlook.com: domain of transitioning mail.notices.dropbox.com discourages use of 148.163.137.252 as permitted sender)

Message-Id

<010001a158936f2a-fda20275-01a1-41fc-927e-7d56e380f903-000000@email.amazonses.com>

Extracted URLs

  • file http://gwinnett.k12.ga.us

  • file http://www.dropbox.com/terms

  • file https://cfl.dropboxstatic.com/static/fonts/atlasgrotesk/AtlasGrotesk-Regular-Web.woff

  • file https://help.dropbox.com/security/terms-service-privacy-policy

  • file https://library.iterable.com/2477/12274/1e6262ea7179463188c2b64aaeeb6b7b-GreyFacebook.png

  • file https://library.iterable.com/2477/12274/3bcbefa1368042c89433c77d840d8ab0-GreyYoutube.png

  • file https://library.iterable.com/2477/12274/7a24a5eebb754a6692790ef0bec76e0b-DBX_Logo_M_4x.png

  • file https://library.iterable.com/2477/12274/c4a9fd9a364f43f8ae3cdaa56dfa2c6c-GreyTwitter.png

  • file https://library.iterable.com/2477/12274/ca94e9f19ef6498fae4d5262d85c433d-DBX_Logo_D_4x.png

  • Show all