Overview

overview

4

Static

static

1

Potential ...B).msg

windows10-2004-x64

4

Potential ...B).msg

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    Potential Phish (47.3 KB).msg
  • Size 69KB
  • Sample261027-rm2nqsst5q
  • SHA256 d153d9e0a03c87e7ffb0b6aa6588aca574cd9127e10afb0315cc368143e750c3
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • Potential Phish (47.3 KB).msg
    .msg 69KB

Potential Phish (47.3 KB).msg

  • SHA256 d153d9e0a03c87e7ffb0b6aa6588aca574cd9127e10afb0315cc368143e750c3
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

010001a17a76a7a0-5eddc2b4-0751-434e-9019-9d9394353406-000000@bounce.email.link.com

Date

Mon, 26 Oct 2026 23:05:58 +0000

Subject

=?utf-8?q?Updates_to_Link=E2=80=99s_Terms_of_Service_and_Privacy_Po?= =?utf-8?q?licy?=

Content-Type

multipart/alternative; boundary="===============4933312649355096247=="

Received

from SJ0PR04MB7501.namprd04.prod.outlook.com (2603:10b6:a03:321::11) by BL3PR04MB8203.namprd04.prod.outlook.com with HTTPS; Mon, 26 Oct 2026 23:06:06 +0000

from BY1P220CA0026.NAMP220.PROD.OUTLOOK.COM (2603:10b6:a03:5c3::17) by SJ0PR04MB7501.namprd04.prod.outlook.com (2603:10b6:a03:321::11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.546.22; Mon, 26 Oct 2026 23:06:01 +0000

from CO1PEPF00018869.namprd03.prod.outlook.com (2603:10b6:a03:5c3:cafe::44) by BY1P220CA0026.outlook.office365.com (2603:10b6:a03:5c3::17) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.546.22 via Frontend Transport; Mon, 26 Oct 2026 23:06:01 +0000

from mx0a-00332601.pphosted.com (148.163.133.252) by CO1PEPF00018869.mail.protection.outlook.com (10.167.249.154) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.569.4 via Frontend Transport; Mon, 26 Oct 2026 23:06:00 +0000

from pps.filterd (m0280862.ppops.net [127.0.0.1]) by mx0a-00332601.pphosted.com (8.18.1.11/8.18.1.11) with ESMTP id 69QMMxK01368715 for <[email protected]>; Mon, 26 Oct 2026 23:06:00 GMT

from i88-182.smtp-out.amazonses.com (i88-182.smtp-out.amazonses.com [24.110.88.182]) by mx0a-00332601.pphosted.com (PPS) with ESMTPS id 4hj7de9ydf-1 (version=TLSv1.3 cipher=TLS_AES_128_GCM_SHA256 bits=128 verify=NOT) for <[email protected]>; Mon, 26 Oct 2026 23:06:00 +0000 (GMT)

Received-Spf

Fail (protection.outlook.com: domain of bounce.email.link.com does not designate 148.163.133.252 as permitted sender) receiver=protection.outlook.com; client-ip=148.163.133.252; helo=mx0a-00332601.pphosted.com;

Message-Id

<010001a17a76a7a0-5eddc2b4-0751-434e-9019-9d9394353406-000000@email.amazonses.com>

Extracted URLs

  • file http://58.email.stripe.com/CI0/010001a17a76a7a0-5eddc2b4-0751-434e-9019-9d9394353406-000000/j2pmRWHyizNajKzOSmd5bwcfNNc5EeZ1y9zWeiPq8ao=452

  • file https://58.email.stripe.com/CL0/https:/link.com/1/010001a17a76a7a0-5eddc2b4-0751-434e-9019-9d9394353406-000000/EVkdcnCqVH5cz6f9Rs2r3gDgkXXLiSKa6tCTyHHLNU4=452

  • file https://58.email.stripe.com/CL0/https:/link.com/agents/1/010001a17a76a7a0-5eddc2b4-0751-434e-9019-9d9394353406-000000/ujIpqqnn4_zyBkIxI-uD0B7z9hc3aiBreKrdtqF0hGw=452

  • file https://58.email.stripe.com/CL0/https:/link.com/agents/2/010001a17a76a7a0-5eddc2b4-0751-434e-9019-9d9394353406-000000/YMVueBe-pbPszrr8WbwEzuu4XSYNDdz4ptWtLqpP5Gw=452

  • file https://58.email.stripe.com/CL0/https:/link.com/privacy-center%23:~:text=What%20are%20Link%20offers%3F/1/010001a17a76a7a0-5eddc2b4-0751-434e-9019-9d9394353406-000000/pSReNpoR0j3taxqmtlqkxzKthQKL4F0NBgwg9hUgudE=452

  • file https://58.email.stripe.com/CL0/https:/link.com/privacy/1/010001a17a76a7a0-5eddc2b4-0751-434e-9019-9d9394353406-000000/NeASp5Ydyt-HPje5tSm4OBqH4mh19FFTB2MwJ4gRozQ=452

  • file https://58.email.stripe.com/CL0/https:/link.com/privacy/preview/1/010001a17a76a7a0-5eddc2b4-0751-434e-9019-9d9394353406-000000/Wrh2jVAhkJCu06X-AaqKaDEFXRTBd52GpBWlxfQ_DXY=452

  • file https://58.email.stripe.com/CL0/https:/link.com/terms/1/010001a17a76a7a0-5eddc2b4-0751-434e-9019-9d9394353406-000000/r2otPDeuiHEZN5x7ufasGKNAsdN4Ryq1cPBHj4SIT00=452

  • file https://58.email.stripe.com/CL0/https:/link.com/terms/preview/1/010001a17a76a7a0-5eddc2b4-0751-434e-9019-9d9394353406-000000/ionAqOPebAWmRhFzS1tQtcmSbr23ltXIT3U47mlT7T4=452

  • Show all