Overview

overview

7

Static

static

1

Potential ...B).msg

windows10-2004-x64

7

Potential ...B).msg

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    Potential Phish (24.1 KB).msg
  • Size 57KB
  • Sample261026-rwq9csxtbz
  • SHA256 6d82e4ebb3ed4831523132c3f83dbe7891da04e38cc02761712694c40905e128
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • Potential Phish (24.1 KB).msg
    .msg 57KB

Potential Phish (24.1 KB).msg

  • SHA256 6d82e4ebb3ed4831523132c3f83dbe7891da04e38cc02761712694c40905e128
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

bounce-mc.us16_231197622.6995-f36cf4eae6@mail136.atl101.mcdlv.net

Date

Fri, 23 Oct 2026 14:01:01 +0000

Subject

2026 Overtime Rules: What Employers Need to Know

Content-Type

multipart/alternative; boundary="===============3100723934070809497=="

Received

from SA0PR04MB7244.namprd04.prod.outlook.com (::1) by PH7SPRMB0172.namprd04.prod.outlook.com with HTTPS; Fri, 23 Oct 2026 14:01:14 +0000

from BN0PR02CA0042.namprd02.prod.outlook.com (2603:10b6:408:e5::17) by SA0PR04MB7244.namprd04.prod.outlook.com (2603:10b6:806:e4::19) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.546.19; Fri, 23 Oct 2026 14:01:04 +0000

from MN7PEPF0000014E.namprd04.prod.outlook.com (2603:10b6:408:e5:cafe::7b) by BN0PR02CA0042.outlook.office365.com (2603:10b6:408:e5::17) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.546.19 via Frontend Transport; Fri, 23 Oct 2026 14:01:04 +0000

from mx0a-00332601.pphosted.com (148.163.133.252) by MN7PEPF0000014E.mail.protection.outlook.com (10.167.254.40) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.569.4 via Frontend Transport; Fri, 23 Oct 2026 14:01:04 +0000

from pps.filterd (m0266389.ppops.net [127.0.0.1]) by mx0a-00332601.pphosted.com (8.18.1.11/8.18.1.11) with ESMTP id 69NABF3S3538507 for <[email protected]>; Fri, 23 Oct 2026 14:01:03 GMT

from mail136.atl101.mcdlv.net (mail136.atl101.mcdlv.net [198.2.130.136]) by mx0a-00332601.pphosted.com (PPS) with ESMTPS id 4hfq8r2cwr-1 (version=TLSv1.3 cipher=TLS_AES_256_GCM_SHA384 bits=256 verify=NOT) for <[email protected]>; Fri, 23 Oct 2026 14:01:03 +0000 (GMT)

from localhost (localhost [127.0.0.1]) by mail136.atl101.mcdlv.net (Mailchimp) with ESMTP id 4jB4Rx4905zDRT3Gl for <[email protected]>; Fri, 23 Oct 2026 14:01:01 +0000 (UTC)

Received-Spf

Fail (protection.outlook.com: domain of mail136.atl101.mcdlv.net does not designate 148.163.133.252 as permitted sender) receiver=protection.outlook.com; client-ip=148.163.133.252; helo=mx0a-00332601.pphosted.com;

X-Mailer

Mailchimp Mailer - **CID5b976b4933f36cf4eae6**

Message-Id

<77490e49f71b2a79a4c018c5d.f36cf4eae6.20261023140030.5b976b4933.bdbeb199@mail136.atl101.mcdlv.net>

Extracted URLs

  • file https://hrlearners.us16.list-manage.com/unsubscribe?u=77490e49f71b2a79a4c018c5d&amp;id=a70c934694&amp;t=b&amp;e=f36cf4eae6&amp;c=5b976b4933

  • file https://hrlearners.us16.list-manage.com/unsubscribe?u=77490e49f71b2a79a4c018c5d&id=a70c934694&t=b&e=f36cf4eae6&c=5b976b4933

  • file https://us.list-manage.com/GtOyo6UFjsNBZI5dPmeWgN?e=f36cf4eae6&amp;c2id=a48949d9629d99a56c6a7873d152d482

  • file https://us.list-manage.com/GtOyo6UFjsNBZI5dPmeWgN?e=f36cf4eae6&c2id=a48949d9629d99a56c6a7873d152d482

  • file https://us.list-manage.com/R4AuwbIlYCR?e=f36cf4eae6&amp;c2id=a48949d9629d99a56c6a7873d152d482

  • file https://us.list-manage.com/R4AuwbIlYCR?e=f36cf4eae6&c2id=a48949d9629d99a56c6a7873d152d482

  • file https://us.list-manage.com/WE2SLp7PJ0v?e=f36cf4eae6&amp;c2id=a48949d9629d99a56c6a7873d152d482

  • file https://us.list-manage.com/WE2SLp7PJ0v?e=f36cf4eae6&c2id=a48949d9629d99a56c6a7873d152d482