Overview

overview

1

Static

static

1

🌟 Alăt...e!.msg

windows10-2004-x64

1

🌟 Alăt...e!.msg

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    🌟 Alătură-te Trendyol și ajungi la milioane de clienți din regiune Crește-ți vânzările mai repede!.msg
  • Size 71KB
  • Sample261027-jms3lastg1
  • SHA256 b0de6a0da7e9a244ab626cb3d1680618482f44b5a8c64d364e11b834e15a5e47
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • 🌟 Alătură-te Trendyol È™i ajungi la milioane de clienÈ›i din regiune CreÈ™te-È›i vânzările mai repede!.msg
    .msg 71KB

🌟 Alătură-te Trendyol și ajungi la milioane de clienți din regiune Crește-ți vânzările mai repede!.msg

  • SHA256 b0de6a0da7e9a244ab626cb3d1680618482f44b5a8c64d364e11b834e15a5e47
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Date

Tue, 27 Oct 2026 07:31:30 +0000

Subject

=?utf-8?B?8J+MnyBBbMSDdHVyxIMtdGUgVHJlbmR5b2wgyJlpIGFqdW5naSBsYSBtaWxp?= =?utf-8?B?b2FuZSBkZSBjbGllbsibaSBkaW4gcmVnaXVuZSDigJMgQ3JlyJl0ZS3Im2kg?= =?utf-8?B?dsOibnrEg3JpbGUgbWFpIHJlcGVkZSE=?=

Content-Type

multipart/alternative; boundary="_000_PKlDv000000000000000000000000000000000000000000000TNK28_"

Received

from DB9PR01MB9149.eurprd01.prod.exchangelabs.com (2603:10a6:10:367::19) by AM9PR01MB7475.eurprd01.prod.exchangelabs.com with HTTPS; Tue, 27 Oct 2026 07:31:35 +0000

from PR3P189CA0007.EURP189.PROD.OUTLOOK.COM (2603:10a6:102:52::12) by DB9PR01MB9149.eurprd01.prod.exchangelabs.com (2603:10a6:10:367::19) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.546.22; Tue, 27 Oct 2026 07:31:31 +0000

from MAD0EPF000008C3.eurprd05.prod.outlook.com (2603:10a6:102:52:cafe::42) by PR3P189CA0007.outlook.office365.com (2603:10a6:102:52::12) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.546.22 via Frontend Transport; Tue, 27 Oct 2026 07:31:31 +0000

from smtp-02be77a63e550f5fc.core1.sfdc-cehfhs.mta.salesforce.com (13.51.149.171) by MAD0EPF000008C3.mail.protection.outlook.com (10.167.241.199) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.569.4 via Frontend Transport; Tue, 27 Oct 2026 07:31:31 +0000

from [127.0.0.1] ([127.0.0.1:54650] helo=eaas-10.eaas.emailinfra.svc.cluster.local) by mx1.core1.sfdc-cehfhs.mta.salesforce.com (envelope-from <email=00d4k000001o3sxuaa.sfcustomeremail.com__@0-55ryulfv5js7zz.sx7amifa62s7fs.4k-1o3sxuaa.swe68.bnc.salesforce.com>) (ecelerity 4.7.0.20116 r(msys-ecelerity:salesforce/4.7/sb3)) with ESMTP id DF/20-01088-25350EA6; Tue, 27 Oct 2026 07:31:30 +0000

from 127.0.0.1 (localhost. [127.0.0.1]) by eaas-10 (EaaS) id <PKlDv000000000000000000000000000000000000000000000TNK28H00Qb07gn7WTaCsNZUW7aU0LA@sfdc.net> for <"[email protected]" <[email protected]>> Tue, 27 Oct 2026 07:31:30 GMT (GMT)

Received-Spf

Pass (protection.outlook.com: domain of 0-55ryulfv5js7zz.sx7amifa62s7fs.4k-1o3sxuaa.swe68.bnc.salesforce.com designates 13.51.149.171 as permitted sender) receiver=protection.outlook.com; client-ip=13.51.149.171; helo=smtp-02be77a63e550f5fc.core1.sfdc-cehfhs.mta.salesforce.com; pr=E

Message-Id

<PKlDv000000000000000000000000000000000000000000000TNK28H00Qb07gn7WTaCsNZUW7aU0LA@sfdc.net>

Extracted URLs

  • file http://trendyol.com

  • file https://academy.trendyol.com/seller-information-center/ro/content/commission-rates-on-trendyol?lang=ro

  • file https://academy.trendyol.com/seller-information-center/ro/content/easy-cross-border-frequently-asked-questions?lang=ro

  • file https://academy.trendyol.com/seller-information-center/ro/content/order-shipping-processes?lang=ro

  • file https://academy.trendyol.com/seller-information-center/ro/content/selling-in-romania-for-romanian-sellers?lang=ro

  • file https://partner.trendyol.com/ro/onboarding/registration/?refCode=00000452&amp;lang=ro-RO

  • file https://partner.trendyol.com/ro/onboarding/registration/?refCode=00000452&lang=ro-RO