202610291613_Factura de Compra Herramientas Poderosas [0A1C8EED-2410040326]_juan[.]perez[.]zip

Sharing

Copy URL Twitter E-mail

General

Target
202610291613_Factura de Compra Herramientas Poderosas [0A1C8EED-2410040326]_juan.perez.zip
Size 88KB
Sample261029-15kydatw9m
SHA256 9667236d0aeda3a1d70da3887655cdfb5a078d37afc01212ce3c2b2b6eeb9b74
MD5 996a1dd334c39d06ec9d1eb4a0429785
SHA1 20130e4d2da2e64b0d2996f2e6cbd7851ac67c0c
SHA512 3d36b2c04efcb0a1e71492b1049e89dc0db3eed03ee3bfd1a82b55c7b615859a0643e7d4a1354af1f1b246b7de917546057169cf1a2a95e9282fed8109088ebd
SSDEEP 1536:HiIX45rjpMTZXOeS1GDjj/1tP795egLy5GfhNDNAFf5zud+/xI5vONUUG30czxF2:Hi8sx1IH/T9ZLyqfm5ydKY39jY/j
TLSH
T1B19312CDA3EF80A7B5153CFE8CFA676EF3075A6580181122D46712C6666D1490D3AB3F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

pdf evasion

Malware Config

Signatures

Malformed or missing cross-reference table in PDF
Malformed or missing cross-reference tables are often used to evade detection
pdf evasion

File Explorer

202610291613_Factura de Compra Herramientas Poderosas [0A1C8EED-2410040326]_juan.perez.zip

.zip 88KB
20261029034733-Factura de Compra Herramientas Poderosas [0A1C8EED-2410040326]-juan.perez.eml

.eml 122KB
Factura 0A1C8EED-2410040326.pdf

.pdf 82KB
email-html-2.txt

.html 834B
email-plain-1.txt

325B

202610291613_Factura de Compra Herramientas Poderosas [0A1C8EED-2410040326]_juan.perez.zip

SHA256 9667236d0aeda3a1d70da3887655cdfb5a078d37afc01212ce3c2b2b6eeb9b74
MD5 996a1dd334c39d06ec9d1eb4a0429785
SHA1 20130e4d2da2e64b0d2996f2e6cbd7851ac67c0c
SHA512 3d36b2c04efcb0a1e71492b1049e89dc0db3eed03ee3bfd1a82b55c7b615859a0643e7d4a1354af1f1b246b7de917546057169cf1a2a95e9282fed8109088ebd
SSDEEP 1536:HiIX45rjpMTZXOeS1GDjj/1tP795egLy5GfhNDNAFf5zud+/xI5vONUUG30czxF2:Hi8sx1IH/T9ZLyqfm5ydKY39jY/j
TLSH
T1B19312CDA3EF80A7B5153CFE8CFA676EF3075A6580181122D46712C6666D1490D3AB3F
MD5 SHA1 SHA512 SSDEEP TLSH

20261029034733-Factura de Compra Herramientas Poderosas [0A1C8EED-2410040326]-juan.perez.eml

SHA256 31da94d044d9fff0d8d07ca13f2173a066229522661ee1552b6dbf48c4816656
MD5 7bbc29b828270caf29d622bf9bad7fd9
SHA1 8cb0cffbbea84064bc3fe14d9f0f03b88ff27dff
SHA512 0dd83722f6666ff386726eff18efeb3584b704963b51df93d4b518982feaeb604faeac4580d1801f67bed8b9d49a077f5bd45e7023a58395dbe8c01e5bef78fb
SSDEEP 1536:w/LOfweYjzAwh6jce00+FJfng9O2zaPtrmGUUkyRkLk7xs4F8y3RToVnJn8jXS:wTHdDhDP/fg9O2ePN4U/RPrNB2Jn8ji
TLSH
T1CDC30216DD1409A4CB06D1EE9B13DC83A193B91D095FA9C46AEA8732039D3C1CF3EB5A
MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

[email protected]

From

[email protected]

Date

Thu, 29 Oct 2026 03:47:14 +0000

Subject

CAS::Factura de Compra Herramientas Poderosas [0A1C8EED-2410040326]

Content-Type

multipart/mixed; boundary="_004_010001a185c4e004ec6187dffd1947b99b6f48a385c36379000000e_"

Received

from SJ2PR22MB4555.namprd22.prod.outlook.com (2603:10b6:a03:55e::6) by SAWPR22MB996659.namprd22.prod.outlook.com with HTTPS; Thu, 29 Oct 2026 03:47:33 +0000

from BY1P220CA0049.NAMP220.PROD.OUTLOOK.COM (2603:10b6:a03:59e::15) by SJ2PR22MB4555.namprd22.prod.outlook.com (2603:10b6:a03:55e::6) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.569.9; Thu, 29 Oct 2026 03:47:16 +0000

from CO1PEPF00012E81.namprd03.prod.outlook.com (2603:10b6:a03:59e:cafe::2a) by BY1P220CA0049.outlook.office365.com (2603:10b6:a03:59e::15) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.546.22 via Frontend Transport; Thu, 29 Oct 2026 03:47:16 +0000

from a9-28.smtp-out.amazonses.com (54.240.9.28) by CO1PEPF00012E81.mail.protection.outlook.com (10.167.249.56) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.569.4 via Frontend Transport; Thu, 29 Oct 2026 03:47:15 +0000

Received-Spf

Pass (protection.outlook.com: domain of mailer.hp.com.gt designates 54.240.9.28 as permitted sender) receiver=protection.outlook.com; client-ip=54.240.9.28; helo=a9-28.smtp-out.amazonses.com; pr=C

Message-Id

<010001a185c4e004-ec6187df-fd19-47b9-9b6f-48a385c36379-000000@email.amazonses.com>