Static

static

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    Message.eml
  • Size 32KB
  • Sample261023-w9j5esds21
  • SHA256 390d4a91b6f15aac2d8ce0b971b8144b5b7e0f4a7da1a00be7b43c9693c37516
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • Message.eml
    .eml 32KB
  • email-html-2.txt
    10KB
  • email-plain-1.txt
    2KB

Message.eml

  • SHA256 390d4a91b6f15aac2d8ce0b971b8144b5b7e0f4a7da1a00be7b43c9693c37516
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

In-Reply-To

CAAjk725+9Xp+=tv-MXeY_mVsnW0on-TzRkY++4-UqthJE__+[email protected]

Return-Path

[email protected]

Date

Fri, 23 Oct 2026 15:04:57 +0100

Subject

=?UTF-8?Q?[EXTERNAL]_=F0=9F=8E=89Save_the_date_:_Milestone_Celebrat?= =?UTF-8?Q?ion?=

Content-Type

multipart/alternative; boundary="000000000000f25d24065e827733"

Received

from BY3PR10CA0016.namprd10.prod.outlook.com (2603:10b6:a03:255::21) by PH7PR14MB5297.namprd14.prod.outlook.com (2603:10b6:510:13a::10) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.546.16; Fri, 23 Oct 2026 14:05:14 +0000

from MWH0EPF000D894C.namprd05.prod.outlook.com (2603:10b6:a03:255:cafe::59) by BY3PR10CA0016.outlook.office365.com (2603:10b6:a03:255::21) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.546.19 via Frontend Transport; Fri, 23 Oct 2026 14:05:14 +0000

from mx0a-0028ab01.pphosted.com (148.163.150.117) by MWH0EPF000D894C.mail.protection.outlook.com (10.167.249.212) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.546.15 via Frontend Transport; Fri, 23 Oct 2026 14:05:14 +0000

from pps.filterd (m0337645.ppops.net [127.0.0.1]) by mx0a-0028ab01.pphosted.com (8.18.1.11/8.18.1.11) with ESMTP id 69NE40DN1157700 for <[email protected]>; Fri, 23 Oct 2026 09:05:13 -0500

from mail-yw1-f180.google.com (mail-yw1-f180.google.com [209.85.128.180]) by mx0a-0028ab01.pphosted.com (PPS) with ESMTPS id 4hfv2phsmu-1 (version=TLSv1.3 cipher=TLS_AES_128_GCM_SHA256 bits=128 verify=OK) for <[email protected]>; Fri, 23 Oct 2026 09:05:13 -0500 (CDT)

by mail-yw1-f180.google.com with SMTP id 00721157ae682-8b09e07e149so8393957b3.1 for <[email protected]>; Fri, 23 Oct 2026 07:05:13 -0700 (PDT)

X-Received

by 2002:a05:690c:f88:b0:8ab:2f89:32e0 with SMTP id 00721157ae682-8b157d6e3f3mr16123617b3.57.1792764311392; Fri, 23 Oct 2026 07:05:11 -0700 (PDT)

Received-Spf

SoftFail (protection.outlook.com: domain of transitioning gmail.com discourages use of 148.163.150.117 as permitted sender)

Message-Id

<CAAjk726grp1q0E7yf+8rF30rDOAVBD0mKip=+[email protected]>

Extracted URLs

  • file https://help.123greetings.com/contact_us.html

  • file https://help.123greetings.com/contact_us.html__;!!EXyGcbrR!UUonGsEB81wjGxM0ScwrDvT98YOAIhVY4MfwNE3OmNTKosLCI_OYJLROyO4Cshj3DpuAPQ1WuZwu6LVfgyz6g73B9qOCjA$

  • file https://link.mail.beehiiv.com/ss/c/u001.9jG_qlp0X8ZsbzqiBISPS4s1ZF6KEckZvLRgEwsnrAM/4v4/_grHx8ZhS1-ZTzRiyRY4sg/h1/h001.WNWj0RvlzXsPzSpokvjK5LiUBLg9L8OuET7_OKg7DEA

  • file https://link.mail.beehiiv.com/ss/c/u001.9jG_qlp0X8ZsbzqiBISPS4s1ZF6KEckZvLRgEwsnrAM/4v4/_grHx8ZhS1-ZTzRiyRY4sg/h1/h001.WNWj0RvlzXsPzSpokvjK5LiUBLg9L8OuET7_OKg7DEA__;!!EXyGcbrR!UUonGsEB81wjGxM0ScwrDvT98YOAIhVY4MfwNE3OmNTKosLCI_OYJLROyO4Cshj3DpuAPQ1WuZwu6LVfgyz6g72R40vHtA$

  • file https://urldefense.com/v3/__

  • file https://www.123greetings.com/

  • file https://www.123greetings.com/__;!!EXyGcbrR!UUonGsEB81wjGxM0ScwrDvT98YOAIhVY4MfwNE3OmNTKosLCI_OYJLROyO4Cshj3DpuAPQ1WuZwu6LVfgyz6g70dsnOHeA$

  • file https://www.123greetings.com/privacy_policy.html

  • file https://www.123greetings.com/privacy_policy.html__;!!EXyGcbrR!UUonGsEB81wjGxM0ScwrDvT98YOAIhVY4MfwNE3OmNTKosLCI_OYJLROyO4Cshj3DpuAPQ1WuZwu6LVfgyz6g72K1EUJWg$

  • Show all