b42a2637-ea8e-42a7-8784-391e8ff5a9a0[.]eml

General

Target
b42a2637-ea8e-42a7-8784-391e8ff5a9a0.eml
Size 22KB
Sample261027-r243eady6w
SHA256 2b01ff8ebaa6ab4dcf5010816fd15691be3718d991cb384f5819684803dd0808
MD5 1a6bfe321e787b63b27357552aa07acf
SHA1 e82d80df45c38658f9ebfdc81241149ab1571a07
SHA512 66037c9c33a5c5ec2fc042dd2b068ac0fdc311c36a758b8c05c9b3809ffe618f7163af3f2427d1a7c4e0c3bf70a89be5ac4ea729fff674d96edb158015bbb5f1
SSDEEP 384:4GY9LIU3CfZQfTLryKH0MyfDOEVn4HfEmEmvMPkXKCI9hKo74bLf:7Y9Lt3CfZbKUMyr34/JJvMPMKCIrKoAb
TLSH
T15FA27F51070E1D32CB615D01AC187F592125BE4B78FB80846C6FB2EF16BE2BA3DE1D96
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

b42a2637-ea8e-42a7-8784-391e8ff5a9a0.eml

.eml 22KB
email-html-2.txt

.html 6KB
email-plain-1.txt

1KB

b42a2637-ea8e-42a7-8784-391e8ff5a9a0.eml

SHA256 2b01ff8ebaa6ab4dcf5010816fd15691be3718d991cb384f5819684803dd0808
MD5 1a6bfe321e787b63b27357552aa07acf
SHA1 e82d80df45c38658f9ebfdc81241149ab1571a07
SHA512 66037c9c33a5c5ec2fc042dd2b068ac0fdc311c36a758b8c05c9b3809ffe618f7163af3f2427d1a7c4e0c3bf70a89be5ac4ea729fff674d96edb158015bbb5f1
SSDEEP 384:4GY9LIU3CfZQfTLryKH0MyfDOEVn4HfEmEmvMPkXKCI9hKo74bLf:7Y9Lt3CfZbKUMyr34/JJvMPMKCIrKoAb
TLSH
T15FA27F51070E1D32CB615D01AC187F592125BE4B78FB80846C6FB2EF16BE2BA3DE1D96
MD5 SHA1 SHA512 SSDEEP TLSH

Password

https://portal.xdr.trendmicro.com/index.html#/app/ti/sandbox

Email Headers

To

[email protected]

From

[email protected]

Date

Mon, 26 Oct 2026 03:13:00 +0000

Subject

=?utf-8?B?UEpOIC0gQ29tdW5pY2FjacOzbiBKdWRpY2lhbA==?=

Content-Type

multipart/alternative; boundary="_000_CPUP215MB2962CEDCD65CC729B75E2A9FB8612CPUP215MB2962LAMP_"

Received

from CY3PR05CU001.outbound.protection.outlook.com (unknown [52.103.7.78]) by inpre01.tmes.trendmicro.com (Trend Micro Email Security) with ESMTPS id 28F1BC010146 for <[email protected]>; Mon, 26 Oct 2026 03:13:03 +0000 (UTC)

from CPUP215MB2962.LAMP215.PROD.OUTLOOK.COM (2603:10d6:103:308::9) by SC3P215MB998861.LAMP215.PROD.OUTLOOK.COM (2603:10d6:300:17c::8) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.546.22; Mon, 26 Oct 2026 03:13:00 +0000

from CPUP215MB2962.LAMP215.PROD.OUTLOOK.COM ([fe80::3a2d:8d37:b15e:72bd]) by CPUP215MB2962.LAMP215.PROD.OUTLOOK.COM ([fe80::3a2d:8d37:b15e:72bd%4]) with mapi id 15.21.0546.021; Mon, 26 Oct 2026 03:13:00 +0000

Message-Id

<CPUP215MB2962CEDCD65CC729B75E2A9FB8612@CPUP215MB2962.LAMP215.PROD.OUTLOOK.COM>

Extracted URLs

file https://goo.su/XgNh4?8XU9KC=ARS8570599818
file https://goo.su/abz3t?T96AKL=ARS0076233278
file https://goo.su/rsNZ?C8SYQJ=ARS1455328668
file https://goo.su/vhVOQ?REY16Z=ARS9886607388

Resubmissions

Sharing