Overview

overview

3

Static

static

1

phish_aler...3).eml

windows10-2004-x64

3

phish_aler...3).eml

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    phish_alert_sp2_2.0.0.0 (53).eml
  • Size 27KB
  • Sample261026-sdvphafw8l
  • SHA256 c122740f36a5b16268a974bfc3e12f9a555e3a9d63bae79480f54df45d97ae84
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • phish_alert_sp2_2.0.0.0 (53).eml
    .eml 27KB
  • email-html-1.txt
    .html 17KB

phish_alert_sp2_2.0.0.0 (53).eml

  • SHA256 c122740f36a5b16268a974bfc3e12f9a555e3a9d63bae79480f54df45d97ae84
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

010001a16aa1ca8c-8f1a724e-4b1d-486a-802a-57d93bc89ae5-000000@ses.adobe.com

Date

Fri, 23 Oct 2026 21:19:10 +0000

Subject

=?UTF-8?B?W0VYVEVSTkFMXSBZb3UgYXJlIGludml0ZWQgdG8gSGlsY29ycCBD?= =?UTF-8?B?aHJpc3RtYXMgUGFydHk=?=

Content-Type

multipart/mixed; boundary="----sinikael-?=_1-17930260095040.31927979198456446"

Received

from IA1PR16MB5401.namprd16.prod.outlook.com (2603:10b6:208:44a::11) by CH0PR16MB4449.namprd16.prod.outlook.com with HTTPS; Fri, 23 Oct 2026 21:19:14 +0000

from PH8PR07CA0026.namprd07.prod.outlook.com (2603:10b6:510:2cf::21) by IA1PR16MB5401.namprd16.prod.outlook.com (2603:10b6:208:44a::11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.546.19; Fri, 23 Oct 2026 21:19:12 +0000

from MW3PEPF00001658.namprd21.prod.outlook.com (2603:10b6:510:2cf:cafe::6c) by PH8PR07CA0026.outlook.office365.com (2603:10b6:510:2cf::21) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.546.19 via Frontend Transport; Fri, 23 Oct 2026 21:19:11 +0000

from c139-183.smtp-out.amazonses.com (76.223.139.183) by MW3PEPF00001658.mail.protection.outlook.com (10.167.249.202) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.569.0 via Frontend Transport; Fri, 23 Oct 2026 21:19:11 +0000

Received-Spf

Pass (protection.outlook.com: domain of ses.adobe.com designates 76.223.139.183 as permitted sender) receiver=protection.outlook.com; client-ip=76.223.139.183; helo=c139-183.smtp-out.amazonses.com; pr=C

Message-Id

<010001a16aa1ca8c-8f1a724e-4b1d-486a-802a-57d93bc89ae5-000000@email.amazonses.com>

Extracted URLs

  • file https://aka.ms/LearnAboutSenderIdentification

  • file https://apo-prod.adobe.io/po-server/link/redirect?target=eyJhbGciOiJIUzUxMiJ9.eyJ0ZW1wbGF0ZSI6ImV4cHJlc3MtZXZlbnRzLXNlcnZpY2VfaHotZXhwcmVzcy1ldmVudHNfSW52aXRhdGlvbl9lbWFpbCIsImVtYWlsQWRkcmVzcyI6InowUnd0WGlWRFNmNnFtaFZsOHNUMlZmT0h5d2pobUZxYWVaTzVpRHBpZzYzNzBWNWpXbEs1NmRCQ3M1UTNQangiLCJyZXF1ZXN0SWQiOiJmNWIyYTY3MS01YTQ5LTQ3OGItOTFkYy02MzJlZGRiYTczZTIiLCJsaW5rIjoiaHR0cHM6Ly93d3cuYWRvYmUuY29tL2dvL2FjY291bnQiLCJsYWJlbCI6IjQiLCJsb2NhbGUiOiJlbl9VUyJ9.hS4G7GwOXJb5pKuS8-HHCP2q4vWnZ5H0jYrVkfIZp-uzOW9WoIFTNHhu2x3ZMpjjalWyskxbHr7jukv5Xeq4yw

  • file https://apo-prod.adobe.io/po-server/link/redirect?target=eyJhbGciOiJIUzUxMiJ9.eyJ0ZW1wbGF0ZSI6ImV4cHJlc3MtZXZlbnRzLXNlcnZpY2VfaHotZXhwcmVzcy1ldmVudHNfSW52aXRhdGlvbl9lbWFpbCIsImVtYWlsQWRkcmVzcyI6InowUnd0WGlWRFNmNnFtaFZsOHNUMlZmT0h5d2pobUZxYWVaTzVpRHBpZzYzNzBWNWpXbEs1NmRCQ3M1UTNQangiLCJyZXF1ZXN0SWQiOiJmNWIyYTY3MS01YTQ5LTQ3OGItOTFkYy02MzJlZGRiYTczZTIiLCJsaW5rIjoiaHR0cHM6Ly93d3cuYWRvYmUuY29tL2dvL2ZvcnVtcyIsImxhYmVsIjoiNiIsImxvY2FsZSI6ImVuX1VTIn0.6WcyNBUpC8PlorIn9f15qzdo3mjICOCXJYa6maboxwc4ZMg67Zkgr1tWErtBHoLqarT19X9lFjv0Ir6PiB62hg

  • file https://apo-prod.adobe.io/po-server/link/redirect?target=eyJhbGciOiJIUzUxMiJ9.eyJ0ZW1wbGF0ZSI6ImV4cHJlc3MtZXZlbnRzLXNlcnZpY2VfaHotZXhwcmVzcy1ldmVudHNfSW52aXRhdGlvbl9lbWFpbCIsImVtYWlsQWRkcmVzcyI6InowUnd0WGlWRFNmNnFtaFZsOHNUMlZmT0h5d2pobUZxYWVaTzVpRHBpZzYzNzBWNWpXbEs1NmRCQ3M1UTNQangiLCJyZXF1ZXN0SWQiOiJmNWIyYTY3MS01YTQ5LTQ3OGItOTFkYy02MzJlZGRiYTczZTIiLCJsaW5rIjoiaHR0cHM6Ly93d3cuYWRvYmUuY29tL2dvL3N1cHBvcnQiLCJsYWJlbCI6IjUiLCJsb2NhbGUiOiJlbl9VUyJ9.M4RDV0F2R2TkkSS77So8ZButnl8WvyPbimLceTWbe9_2S3VvOI3ves1CK0gXKc5kk-gHX4U4Xpe597tQ2NcBWg

  • file https://apo-prod.adobe.io/po-server/link/redirect?target=eyJhbGciOiJIUzUxMiJ9.eyJ0ZW1wbGF0ZSI6ImV4cHJlc3MtZXZlbnRzLXNlcnZpY2VfaHotZXhwcmVzcy1ldmVudHNfSW52aXRhdGlvbl9lbWFpbCIsImVtYWlsQWRkcmVzcyI6InowUnd0WGlWRFNmNnFtaFZsOHNUMlZmT0h5d2pobUZxYWVaTzVpRHBpZzYzNzBWNWpXbEs1NmRCQ3M1UTNQangiLCJyZXF1ZXN0SWQiOiJmNWIyYTY3MS01YTQ5LTQ3OGItOTFkYy02MzJlZGRiYTczZTIiLCJsaW5rIjoiaHR0cHM6Ly93d3cuYWRvYmUuY29tL2dvL3RyYWRlbWFya3MiLCJsYWJlbCI6IjciLCJsb2NhbGUiOiJlbl9VUyJ9.GDukNV7PO3VEWw4r-MLkaKtLSJhf9KG6s2UdG6P3EJ1xkSyQLrOSJ_p00Pjqt1W9fv_s8Jo-XEZTrt1GL7WEig

  • file https://apo-prod.adobe.io/po-server/link/redirect?target=eyJhbGciOiJIUzUxMiJ9.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.GEktv6TmzzKU48lDFOzjT90e7gktZLalUxCswAsxMbmVOUm7hbokf0_LATWGZUmzmDRZtWI0H36PWr2K2mAb2A

  • file https://apo-prod.adobe.io/po-server/link/redirect?target=eyJhbGciOiJIUzUxMiJ9.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.bcUyMeBXE_G8lXvVcv_XnUqdYgvo9IrdSzSsYoO4jujuT6vsWoh0R2VFIh2PeyD5G5suJLcBGFqPGkXan6CPBQ