Static

static

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    3bda2f6e-37b7-462f-235f-3e94da43e1d8.eml
  • Size 6.0MB
  • Sample261023-dd9fbsht3w
  • SHA256 75e5ea7baf9dc2f5098875e89d1b6ee027a6385369b6ee3a05f310754b697814
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • 3bda2f6e-37b7-462f-235f-3e94da43e1d8.eml
    .eml 6.0MB
  • Keysight Training.zip
    .zip 4.4MB
  • email-html-2.txt
    .html 1KB
  • email-plain-1.txt
    1KB

3bda2f6e-37b7-462f-235f-3e94da43e1d8.eml

  • SHA256 75e5ea7baf9dc2f5098875e89d1b6ee027a6385369b6ee3a05f310754b697814
  • MD5 SHA1 SHA512 SSDEEP TLSH
Password
M@yIsangPun0NgKamatisNanabaliDahilSabigatng!bon

Email Headers

Return-Path

[email protected]

Date

Thu, 22 Oct 2026 06:10:28 +0000

Subject

Keysight

Content-Type

multipart/mixed; boundary="_004_SI6PR04MB8329C2D7CB7DB7ADA92C05258C652SI6PR04MB8329apcp_"

Received

from PS2PR02CA0050.apcprd02.prod.outlook.com (2603:1096:300:5a::14) by SEZPR03MB6617.apcprd03.prod.outlook.com (2603:1096:101:78::13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.546.15; Thu, 22 Oct 2026 06:10:45 +0000

from OSA0EPF000000C6.apcprd02.prod.outlook.com (2603:1096:300:5a:cafe::88) by PS2PR02CA0050.outlook.office365.com (2603:1096:300:5a::14) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.546.16 via Frontend Transport; Thu, 22 Oct 2026 06:10:45 +0000

from mx0b-0053a902.pphosted.com (148.163.140.200) by OSA0EPF000000C6.mail.protection.outlook.com (10.167.240.52) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.546.15 via Frontend Transport; Thu, 22 Oct 2026 06:10:44 +0000

from pps.filterd (m0290639.ppops.net [127.0.0.1]) by mx0b-0053a902.pphosted.com (8.18.1.11/8.18.1.11) with ESMTP id 69M3i9VL4146871 for <[email protected]>; Thu, 22 Oct 2026 14:10:42 +0800

from os8pr02cu002.outbound.protection.outlook.com (mail-japanwestazon11012059.outbound.protection.outlook.com [40.107.75.59]) by mx0b-0053a902.pphosted.com (PPS) with ESMTPS id 4hf98krcwy-1 (version=TLSv1.3 cipher=TLS_AES_256_GCM_SHA384 bits=256 verify=NOT) for <[email protected]>; Thu, 22 Oct 2026 14:10:35 +0800 (WST)

from SI6PR04MB8329.apcprd04.prod.outlook.com (2603:1096:4:230::12) by JH0PR04MB7204.apcprd04.prod.outlook.com (2603:1096:990:37::10) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.546.14; Thu, 22 Oct 2026 06:10:28 +0000

from SI6PR04MB8329.apcprd04.prod.outlook.com ([fe80::6ad8:ffa1:5d03:a9b4]) by SI6PR04MB8329.apcprd04.prod.outlook.com ([fe80::6ad8:ffa1:5d03:a9b4%6]) with mapi id 15.21.0546.012; Thu, 22 Oct 2026 06:10:28 +0000

Received-Spf

Pass (protection.outlook.com: domain of sgx.com designates 148.163.140.200 as permitted sender) receiver=protection.outlook.com; client-ip=148.163.140.200; helo=mx0b-0053a902.pphosted.com; pr=C

Message-Id

<SI6PR04MB8329C2D7CB7DB7ADA92C05258C652@SI6PR04MB8329.apcprd04.prod.outlook.com>