Overview

overview

4

Static

static

1

phish_aler...3).eml

windows10-2004-x64

4

phish_aler...3).eml

windows11-ltsc_2024-x64

1

email-html-1.html

windows10-2004-x64

3

email-html-1.html

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    phish_alert_sp2_2.0.0.0 (3).eml
  • Size 42KB
  • Sample261027-sr3bhasw8p
  • SHA256 3ef5eadbefe6398479c496679a081efe64958f05651b094211d846be1648ae27
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • phish_alert_sp2_2.0.0.0 (3).eml
    .eml 42KB
  • email-html-1.txt
    .html 29KB

phish_alert_sp2_2.0.0.0 (3).eml

  • SHA256 3ef5eadbefe6398479c496679a081efe64958f05651b094211d846be1648ae27
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

[email protected]

Date

Tue, 27 Oct 2026 08:53:27 -0600

Subject

=?UTF-8?B?W0VYVEVSTkFMXSBZb3VyIEZvcmQgc2lnbi1pbiBleHBlcmllbmNl?= =?UTF-8?B?IGlzIHVwZGF0aW5nIHNvb24gZm9yIGJldHRlciBzZWN1cml0eQ==?=

Content-Type

multipart/mixed; boundary="----sinikael-?=_1-17931129036680.43535580879420865"

Received

from SA1PR16MB5194.namprd16.prod.outlook.com (2603:10b6:806:33c::9) by DSVPR16MB680370.namprd16.prod.outlook.com with HTTPS; Tue, 27 Oct 2026 14:53:33 +0000

from CY5PR17CA0052.namprd17.prod.outlook.com (2603:10b6:930:12::30) by SA1PR16MB5194.namprd16.prod.outlook.com (2603:10b6:806:33c::9) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.546.22; Tue, 27 Oct 2026 14:53:28 +0000

from EA8PEPF0000000C.namprd05.prod.outlook.com (2603:10b6:930:12:cafe::1c) by CY5PR17CA0052.outlook.office365.com (2603:10b6:930:12::30) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.546.22 via Frontend Transport; Tue, 27 Oct 2026 14:53:28 +0000

from mta.msg.ford.com (13.110.227.252) by EA8PEPF0000000C.mail.protection.outlook.com (10.167.249.235) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.569.4 via Frontend Transport; Tue, 27 Oct 2026 14:53:28 +0000

by mta.msg.ford.com id hs2tee39mjch for <[email protected]>; Tue, 27 Oct 2026 14:53:27 +0000 (envelope-from <[email protected]>)

Received-Spf

Pass (protection.outlook.com: domain of bounce.msg.ford.com designates 13.110.227.252 as permitted sender) receiver=protection.outlook.com; client-ip=13.110.227.252; helo=mta.msg.ford.com; pr=C

Message-Id

<[email protected]>

Extracted URLs

  • file https://click.msg.ford.com/?qs=ABp7ImQiOjUwNDIsInQiOjE0NzUsInMiOjEyfQAMAAAAAAPC-Rnzg9Pih3YwEEg8zG6SShsGqRXcj-ISv2rVuoipgsdJEh-8ROwhrBDbZrCYo-aRu7UtPhPRmppD_J_AI2ntO1Bv74N3Kp7k2ABJpQ

  • file https://click.msg.ford.com/?qs=ABp7ImQiOjUwNDIsInQiOjE0NzUsInMiOjEyfQAMAAAAAAPC-RnzhM8M0jJBU5Q6Icr3iRynVo8e5p7gP-B_hjNPIiTY7KoCYHstuTP1NngYl2WRtK3TGEmXd-DPPAbUVenku5FKWzRR1-xBimc8FxUf7mY

  • file https://click.msg.ford.com/?qs=ABp7ImQiOjUwNDIsInQiOjE0NzUsInMiOjEyfQAMAAAAAAPC-RnzhUC3w453KNU8EumzsUqs7mCG8-bx_UtAcRZczxMpnh2V97BAcy5LVYhpiRvrl-Mftq3rFvkwekV6T34fVNnhAso_i4tUjhCcTqekSE8

  • file https://click.msg.ford.com/?qs=ABp7ImQiOjUwNDIsInQiOjE0NzUsInMiOjEyfQAMAAAAAAPC-RnzhlEm1IKR4hS4v22GWTLXSeu_ZoCF0ZXYR95TDDwf5WAnCLZPZ4RZgg7BZMPO3MQSAeA7ae6TZk-zlmdS889mHvZqDpmTsgJTRYZZmTs

  • file https://click.msg.ford.com/?qs=ABp7ImQiOjUwNDIsInQiOjE0NzUsInMiOjEyfQAMAAAAAAPC-RnzhxcDD3605RRNlHLkwk46mdJAKETeOr4yAznAw1_llQkF6-UaqnINvR7WkFZZ9haUO6t2U4k0Y9vrTi9xPwObmAp_A2ejruuwwL3sSgQ

  • file https://click.msg.ford.com/?qs=ABp7ImQiOjUwNDIsInQiOjE0NzUsInMiOjEyfQAMAAAAAAPC-Rnzi9PJeSl-vEYYYRimIKle3--jv-I_2Frpyz47bUUsbe9v3rF1le1X8QQgVOmraNqTllSeKLOg5cH8Lji2abN64gG0I5Dto2Ml226TGZ4

  • file https://click.msg.ford.com/?qs=ABp7ImQiOjUwNDIsInQiOjE0NzUsInMiOjEyfQAMAAAAAAPC-RnziE5ZVsH4J4h1U5koM1k-anUa3I6ZaVG4m3rDqiTUwNLKVjjzItY-eaM2lzJqJuL_FaceOT5DQGJismQ9e5bT0nTCJbOlSbASuUn0nck

  • file https://click.msg.ford.com/?qs=ABp7ImQiOjUwNDIsInQiOjE0NzUsInMiOjEyfQAMAAAAAAPC-Rnzie3WZKrrNWMawyFK0_KNoHhb9LQCcBErV5GxDdLtfdeeDH_30H2c7rZqmXc2nO2qZMrL3fEsmTdmGQTwI-tA-uDrhL38nhfnOHc-syY

  • file https://click.msg.ford.com/?qs=ABp7ImQiOjUwNDIsInQiOjE0NzUsInMiOjEyfQAMAAAAAAPC-Rnzip0tbDIDGtGD0p1SBtYXVsgUvFgit8G9xHzsMCNGKEDgV_9fePUmj-mEvtuMy1yKiXgSZB_KugqEedYhK1m9vClE8ZjJqAfX9uGdrtY

  • Show all