General

  • Target
    807acfc9-eb0f-3a9e-dabf-d8366a1f11fc.eml
  • Size 61KB
  • Sample261027-tfc3xafs2n
  • SHA256 b2eaa0fda1009e50abd7307a99fef92933bbec6dbd54e304338626fbbb4475c7
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

File Explorer

  • 807acfc9-eb0f-3a9e-dabf-d8366a1f11fc.eml
    .eml 61KB
  • Invoices & Billing Summary_11200.pdf
    .pdf 32KB
  • email-html-2.txt
    485B
  • email-plain-1.txt
    402B

807acfc9-eb0f-3a9e-dabf-d8366a1f11fc.eml

  • SHA256 b2eaa0fda1009e50abd7307a99fef92933bbec6dbd54e304338626fbbb4475c7
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

[email protected]

Date

Thu, 22 Oct 2026 12:21:30 -0500

Subject

Your Daily Digest for Thur, 10/22 is ready to view

Content-Type

multipart/mixed; boundary="----=_Part_18e0e9c66708d37c_85804207"

Received

from PH0PR13MB5469.namprd13.prod.outlook.com (2603:10b6:510:142::11) by CH0PR13MB4667.namprd13.prod.outlook.com with HTTPS; Thu, 22 Oct 2026 17:22:48 +0000

from DM6PR02CA0110.namprd02.prod.outlook.com (2603:10b6:5:1b4::12) by PH0PR13MB5469.namprd13.prod.outlook.com (2603:10b6:510:142::11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.546.15; Thu, 22 Oct 2026 17:21:32 +0000

from CH1PEPF0005BD61.namprd02.prod.outlook.com (2603:10b6:5:1b4:cafe::6e) by DM6PR02CA0110.outlook.office365.com (2603:10b6:5:1b4::12) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.546.17 via Frontend Transport; Thu, 22 Oct 2026 17:21:31 +0000

from SN4PR2101CU001.outbound.protection.outlook.com (40.93.195.123) by CH1PEPF0005BD61.mail.protection.outlook.com (10.167.244.250) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.546.15 via Frontend Transport; Thu, 22 Oct 2026 17:21:31 +0000

from CH5PR02CA0021.namprd02.prod.outlook.com (2603:10b6:610:1ed::26) by IA3PR19MB613440.namprd19.prod.outlook.com (2603:10b6:208:70e::18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.546.15; Thu, 22 Oct 2026 17:21:30 +0000

from CH3PEPF00000010.namprd04.prod.outlook.com (2603:10b6:610:1ed:cafe::55) by CH5PR02CA0021.outlook.office365.com (2603:10b6:610:1ed::26) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.546.17 via Frontend Transport; Thu, 22 Oct 2026 17:21:30 +0000

from localhost (147.124.209.9) by CH3PEPF00000010.mail.protection.outlook.com (10.167.244.41) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.546.15 via Frontend Transport; Thu, 22 Oct 2026 17:21:29 +0000

Received-Spf

Pass (protection.outlook.com: domain of portlandgolfclub.com designates 40.93.195.123 as permitted sender) receiver=protection.outlook.com; client-ip=40.93.195.123; helo=SN4PR2101CU001.outbound.protection.outlook.com; pr=C

Fail (protection.outlook.com: domain of portlandgolfclub.com does not designate 147.124.209.9 as permitted sender) receiver=protection.outlook.com; client-ip=147.124.209.9; helo=localhost;

Message-Id

<[email protected]>