Static

static

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    20260903_155838_65BCB3E2A2114E996C21.eml
  • Size 279KB
  • Sample261027-dyhs4sa16r
  • SHA256 aab14605ee7fcb62c99c9efcd0695e0cbd12fdde1e93cdc8ed630813370061f6
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • 20260903_155838_65BCB3E2A2114E996C21.eml
    .eml 279KB
  • Document_260903_170314.pdf
    .pdf 198KB

20260903_155838_65BCB3E2A2114E996C21.eml

  • SHA256 aab14605ee7fcb62c99c9efcd0695e0cbd12fdde1e93cdc8ed630813370061f6
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

[email protected]

Date

Thu, 03 Sep 2026 17:03:20 -0500

Subject

AETP VELEZ DURAND GIANCARLO

Content-Type

multipart/mixed; boundary="===============3986421978339584554=="

Received

from MW4PR22MB3110.namprd22.prod.outlook.com (::1) by MW6PR22MB4321.namprd22.prod.outlook.com with HTTPS; Thu, 3 Sep 2026 20:58:37 +0000

from DS1P221CA0025.NAMP221.PROD.OUTLOOK.COM (2603:10b6:8:242::16) by MW4PR22MB3110.namprd22.prod.outlook.com (2603:10b6:303:189::9) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.360.13; Thu, 3 Sep 2026 20:58:05 +0000

from DS1PEPF0001709C.namprd05.prod.outlook.com (2603:10b6:8:242:cafe::73) by DS1P221CA0025.outlook.office365.com (2603:10b6:8:242::16) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.382.12 via Frontend Transport; Thu, 3 Sep 2026 20:58:05 +0000

from cassinelli.pe (190.81.164.100) by DS1PEPF0001709C.mail.protection.outlook.com (10.167.18.106) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.382.8 via Frontend Transport; Thu, 3 Sep 2026 20:58:03 +0000

from C_OFI_PISO3_SUR.cassinelli.pe ([192.168.36.43]) by cassinelli.pe with Microsoft SMTPSVC(10.0.17763.1697); Thu, 3 Sep 2026 13:58:02 -0700

Received-Spf

Pass (protection.outlook.com: domain of cassinelli.com designates 190.81.164.100 as permitted sender) receiver=protection.outlook.com; client-ip=190.81.164.100; helo=cassinelli.pe; pr=C

Message-Id

<cf0f6c9310ec97015f3d6f7825de8190@localhost>