Overview

overview

7

Static

static

1

Potential ...B).msg

windows10-2004-x64

7

Potential ...B).msg

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    Potential Phish (88.5 KB).msg
  • Size 120KB
  • Sample261026-q94k6set31
  • SHA256 3d140b28ce857be07e85dea335bffb739f7af46edffdd6fc8eccfb3c44282972
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • Potential Phish (88.5 KB).msg
    .msg 120KB

Potential Phish (88.5 KB).msg

  • SHA256 3d140b28ce857be07e85dea335bffb739f7af46edffdd6fc8eccfb3c44282972
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

[email protected]

Date

Wed, 21 Oct 2026 22:43:35 +0000

Subject

Flexible payment options await, Harold

Content-Type

multipart/alternative; boundary="===============1087899431130039718=="

Received

from CO6PR04MB7554.namprd04.prod.outlook.com (2603:10b6:303:ab::16) by DM6PR04MB4252.namprd04.prod.outlook.com with HTTPS; Wed, 21 Oct 2026 22:43:43 +0000

from BN9PR03CA0300.namprd03.prod.outlook.com (2603:10b6:408:f5::35) by CO6PR04MB7554.namprd04.prod.outlook.com (2603:10b6:303:ab::16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.546.14; Wed, 21 Oct 2026 22:43:38 +0000

from BN1PEPF00006001.namprd05.prod.outlook.com (2603:10b6:408:f5:cafe::7e) by BN9PR03CA0300.outlook.office365.com (2603:10b6:408:f5::35) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.496.5 via Frontend Transport; Wed, 21 Oct 2026 22:43:38 +0000

from mx0b-00332601.pphosted.com (148.163.137.252) by BN1PEPF00006001.mail.protection.outlook.com (10.167.243.233) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.546.15 via Frontend Transport; Wed, 21 Oct 2026 22:43:37 +0000

from pps.filterd (m0266390.ppops.net [127.0.0.1]) by mx0a-00332601.pphosted.com (8.18.1.11/8.18.1.11) with ESMTP id 69LKf2ec2991013 for <[email protected]>; Wed, 21 Oct 2026 22:43:37 GMT

from mta-84-172.sparkpostmail.com (mta-84-172.sparkpostmail.com [192.174.84.172]) by mx0a-00332601.pphosted.com (PPS) with ESMTPS id 4hevdaaf7m-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for <[email protected]>; Wed, 21 Oct 2026 22:43:36 +0000 (GMT)

from [10.90.32.111] ([10.90.32.111]) by i-04dac57fef8a85b96.mta1vrest.sd.prd.sparkpost (ecelerity 5.3.0.76509 r(msys-ecelerity:tags/5.3.0.26)) with REST id 52/56-05250-71049DA6; Wed, 21 Oct 2026 22:43:35 +0000

Received-Spf

SoftFail (protection.outlook.com: domain of transitioning bounce.carvana.com discourages use of 148.163.137.252 as permitted sender)

Message-Id

<52.56.05250.71049DA6@i-04dac57fef8a85b96.mta1vrest.sd.prd.sparkpost>

Extracted URLs

  • file http://gcpsk12.org

  • file https://d15k2d11r6t6rl.cloudfront.net/public/users/Integrators/669d5713-9b6a-46bb-bd7e-c542cff6dd6a/21900be447f143299095170ca8054cb7/comfort_suvs_white_bg_silver.png

  • file https://d15k2d11r6t6rl.cloudfront.net/public/users/Integrators/669d5713-9b6a-46bb-bd7e-c542cff6dd6a/21900be447f143299095170ca8054cb7/comfort_suvs_white_bg_silver_mobile.png

  • file https://d15k2d11r6t6rl.cloudfront.net/public/users/Integrators/669d5713-9b6a-46bb-bd7e-c542cff6dd6a/21900be447f143299095170ca8054cb7/trucks_from_22K_white_bg_blue.png

  • file https://d15k2d11r6t6rl.cloudfront.net/public/users/Integrators/669d5713-9b6a-46bb-bd7e-c542cff6dd6a/21900be447f143299095170ca8054cb7/trucks_from_22K_white_bg_blue_mobile.png

  • file https://d15k2d11r6t6rl.cloudfront.net/public/users/Integrators/669d5713-9b6a-46bb-bd7e-c542cff6dd6a/da32f5fe76f24d5dabad92f2904972a1/2023_Sebastian_Gif_Desktop_1.gif

  • file https://d15k2d11r6t6rl.cloudfront.net/public/users/Integrators/669d5713-9b6a-46bb-bd7e-c542cff6dd6a/da32f5fe76f24d5dabad92f2904972a1/2023_Sebastian_Gif_Mobile_1.gif

  • file https://d15k2d11r6t6rl.cloudfront.net/public/users/Integrators/669d5713-9b6a-46bb-bd7e-c542cff6dd6a/da32f5fe76f24d5dabad92f2904972a1/calculatorWandIcon.png

  • file https://d15k2d11r6t6rl.cloudfront.net/public/users/Integrators/669d5713-9b6a-46bb-bd7e-c542cff6dd6a/da32f5fe76f24d5dabad92f2904972a1/calendarcheck56.png

  • Show all