Overview

overview

1

Static

static

1

phish_aler...6).eml

windows10-2004-x64

1

phish_aler...6).eml

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    phish_alert_sp2_2.0.0.0 (56).eml
  • Size 146KB
  • Sample261027-qf4dbads9t
  • SHA256 b56f8fdd49e5d3e0c7cf80157cb10513342f5c61629f88506e3446dc17e51296
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • phish_alert_sp2_2.0.0.0 (56).eml
    .eml 146KB
  • Dashboard
    .png 2KB
  • PowerBIReport
    .png 2KB
  • email-html-1.txt
    .html 118KB

phish_alert_sp2_2.0.0.0 (56).eml

  • SHA256 b56f8fdd49e5d3e0c7cf80157cb10513342f5c61629f88506e3446dc17e51296
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

[email protected]

Date

Mon, 26 Oct 2026 19:56:17 +0000

Subject

=?UTF-8?B?W0VYVEVSTkFMXSBZb3VyIFBvd2VyIEJJIGRpZ2VzdDogVG9wIHBp?= =?UTF-8?B?Y2tzIGFuZCBmYXZvcml0ZXM=?=

Content-Type

multipart/mixed; boundary="----sinikael-?=_1-17931044955800.1975804967134881"

Received

from DS0PR16MB7125.namprd16.prod.outlook.com (::1) by DS0PR16MB6854.namprd16.prod.outlook.com with HTTPS; Mon, 26 Oct 2026 19:56:24 +0000

from CH2PR04CA0014.namprd04.prod.outlook.com (2603:10b6:610:52::24) by DS0PR16MB7125.namprd16.prod.outlook.com (2603:10b6:8:301::5) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.546.22; Mon, 26 Oct 2026 19:56:20 +0000

from CH2PEPF00000143.namprd02.prod.outlook.com (2603:10b6:610:52:cafe::48) by CH2PR04CA0014.outlook.office365.com (2603:10b6:610:52::24) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.546.22 via Frontend Transport; Mon, 26 Oct 2026 19:56:19 +0000

from CY3PR05CU001.outbound.protection.outlook.com (2a01:111:f403:c112::7) by CH2PEPF00000143.mail.protection.outlook.com (2603:10b6:61f:fc00::364) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.569.4 via Frontend Transport; Mon, 26 Oct 2026 19:56:19 +0000

from outlook.office365.com (2603:10b6:806:126::24) by SJ0PR06MB7472.namprd06.prod.outlook.com with HTTP via SN7PR04CA0199.NAMPRD04.PROD.OUTLOOK.COM; Mon, 26 Oct 2026 19:56:17 +0000

Received-Spf

Pass (protection.outlook.com: domain of microsoft.com designates 2a01:111:f403:c112::7 as permitted sender) receiver=protection.outlook.com; client-ip=2a01:111:f403:c112::7; helo=CY3PR05CU001.outbound.protection.outlook.com; pr=C

Message-Id

<[email protected]>

Extracted URLs

  • file https://nam.safelink.emails.azure.net/redirect/?destination=https%3A%2F%2Fapp.powerbi.com%2Fgroups%2F3ecd3cf5-dcf9-4392-bbf3-4c7684568de5%2Fdashboards%2Fcd8f20ab-d25d-45d6-8dfa-ca4a737695a2%3Fpbi_source%3DNotificationPlatform_DigestReminder_Email_Dashboard-PopularInOrg%26notificationType%3DDigestReminder%26userControlNotificationType%3DDigestReminder%26notificationId%3Db57669b5-0de3-43a6-a58e-b3420d147ba1&p=bT1kZDZjNWI0MS0zOWZlLTQ4NjctOTY2My1iN2FlZTcyN2Y5YTImdT1hZW8mbD1jZDhmMjBhYi1kMjVkLTQ1ZDYtOGRmYS1jYTRhNzM3Njk1YTI%3D

  • file https://nam.safelink.emails.azure.net/redirect/?destination=https%3A%2F%2Fapp.powerbi.com%2Fgroups%2F3ecd3cf5-dcf9-4392-bbf3-4c7684568de5%2Fdashboards%2Fcd8f20ab-d25d-45d6-8dfa-ca4a737695a2%3Fpbi_source%3DNotificationPlatform_DigestReminder_Email_Dashboard-PopularInOrg%26notificationType%3DDigestReminder%26userControlNotificationType%3DDigestReminder%26notificationId%3Db57669b5-0de3-43a6-a58e-b3420d147ba1&p=bT1kZDZjNWI0MS0zOWZlLTQ4NjctOTY2My1iN2FlZTcyN2Y5YTImdT1hZW8mbD1jZDhmMjBhYi1kMjVkLTQ1ZDYtOGRmYS1jYTRhNzM3Njk1YTJfMg%3D%3D

  • file https://nam.safelink.emails.azure.net/redirect/?destination=https%3A%2F%2Fapp.powerbi.com%2Fgroups%2F8a1170f6-512d-4dae-bcfb-4f610270ca67%2Freports%2F1dca11be-8700-4aa3-ab9b-f488a8dc96e3%3Fpbi_source%3DNotificationPlatform_DigestReminder_Email_PowerBIReport-ViewedByOrg%26notificationType%3DDigestReminder%26userControlNotificationType%3DDigestReminder%26notificationId%3Db57669b5-0de3-43a6-a58e-b3420d147ba1&p=bT1kZDZjNWI0MS0zOWZlLTQ4NjctOTY2My1iN2FlZTcyN2Y5YTImdT1hZW8mbD0xZGNhMTFiZS04NzAwLTRhYTMtYWI5Yi1mNDg4YThkYzk2ZTM%3D

  • file https://nam.safelink.emails.azure.net/redirect/?destination=https%3A%2F%2Fapp.powerbi.com%2Fgroups%2F8a1170f6-512d-4dae-bcfb-4f610270ca67%2Freports%2F1dca11be-8700-4aa3-ab9b-f488a8dc96e3%3Fpbi_source%3DNotificationPlatform_DigestReminder_Email_PowerBIReport-ViewedByOrg%26notificationType%3DDigestReminder%26userControlNotificationType%3DDigestReminder%26notificationId%3Db57669b5-0de3-43a6-a58e-b3420d147ba1&p=bT1kZDZjNWI0MS0zOWZlLTQ4NjctOTY2My1iN2FlZTcyN2Y5YTImdT1hZW8mbD0xZGNhMTFiZS04NzAwLTRhYTMtYWI5Yi1mNDg4YThkYzk2ZTNfMg%3D%3D

  • file https://nam.safelink.emails.azure.net/redirect/?destination=https%3A%2F%2Fapp.powerbi.com%2Fgroups%2F9ce29db0-a73c-4778-808a-dfcb5e64f6f3%2Freports%2Fd247b859-3081-40cc-877f-6db7c316d325%3Fpbi_source%3DNotificationPlatform_DigestReminder_Email_PowerBIReport-Frequents%26notificationType%3DDigestReminder%26userControlNotificationType%3DDigestReminder%26notificationId%3Db57669b5-0de3-43a6-a58e-b3420d147ba1&p=bT1kZDZjNWI0MS0zOWZlLTQ4NjctOTY2My1iN2FlZTcyN2Y5YTImdT1hZW8mbD1kMjQ3Yjg1OS0zMDgxLTQwY2MtODc3Zi02ZGI3YzMxNmQzMjU%3D

  • file https://nam.safelink.emails.azure.net/redirect/?destination=https%3A%2F%2Fapp.powerbi.com%2Fgroups%2F9ce29db0-a73c-4778-808a-dfcb5e64f6f3%2Freports%2Fd247b859-3081-40cc-877f-6db7c316d325%3Fpbi_source%3DNotificationPlatform_DigestReminder_Email_PowerBIReport-Frequents%26notificationType%3DDigestReminder%26userControlNotificationType%3DDigestReminder%26notificationId%3Db57669b5-0de3-43a6-a58e-b3420d147ba1&p=bT1kZDZjNWI0MS0zOWZlLTQ4NjctOTY2My1iN2FlZTcyN2Y5YTImdT1hZW8mbD1kMjQ3Yjg1OS0zMDgxLTQwY2MtODc3Zi02ZGI3YzMxNmQzMjVfMg%3D%3D

  • file https://nam.safelink.emails.azure.net/redirect/?destination=https%3A%2F%2Fapp.powerbi.com%2Fgroups%2F9ce29db0-a73c-4778-808a-dfcb5e64f6f3%2Freports%2Fd247b859-3081-40cc-877f-6db7c316d325%3Fpbi_source%3DNotificationPlatform_DigestReminder_Email_PowerBIReport-ViewedByOrg%26notificationType%3DDigestReminder%26userControlNotificationType%3DDigestReminder%26notificationId%3Db57669b5-0de3-43a6-a58e-b3420d147ba1&p=bT1kZDZjNWI0MS0zOWZlLTQ4NjctOTY2My1iN2FlZTcyN2Y5YTImdT1hZW8mbD1kMjQ3Yjg1OS0zMDgxLTQwY2MtODc3Zi02ZGI3YzMxNmQzMjVfMw%3D%3D

  • file https://nam.safelink.emails.azure.net/redirect/?destination=https%3A%2F%2Fapp.powerbi.com%2Fgroups%2F9ce29db0-a73c-4778-808a-dfcb5e64f6f3%2Freports%2Fd247b859-3081-40cc-877f-6db7c316d325%3Fpbi_source%3DNotificationPlatform_DigestReminder_Email_PowerBIReport-ViewedByOrg%26notificationType%3DDigestReminder%26userControlNotificationType%3DDigestReminder%26notificationId%3Db57669b5-0de3-43a6-a58e-b3420d147ba1&p=bT1kZDZjNWI0MS0zOWZlLTQ4NjctOTY2My1iN2FlZTcyN2Y5YTImdT1hZW8mbD1kMjQ3Yjg1OS0zMDgxLTQwY2MtODc3Zi02ZGI3YzMxNmQzMjVfNA%3D%3D

  • file https://nam.safelink.emails.azure.net/redirect/?destination=https%3A%2F%2Fapp.powerbi.com%2Fgroups%2Fcbcd0390-eb9e-4556-b2c2-93fb6f7e903f%2Freports%2Fa9f4fae6-2b1b-4774-94cd-af45059804b4%3Fpbi_source%3DNotificationPlatform_DigestReminder_Email_PowerBIReport-Frequents%26notificationType%3DDigestReminder%26userControlNotificationType%3DDigestReminder%26notificationId%3Db57669b5-0de3-43a6-a58e-b3420d147ba1&p=bT1kZDZjNWI0MS0zOWZlLTQ4NjctOTY2My1iN2FlZTcyN2Y5YTImdT1hZW8mbD1hOWY0ZmFlNi0yYjFiLTQ3NzQtOTRjZC1hZjQ1MDU5ODA0YjQ%3D

  • Show all