Kimberly-Clark Solicitud de estado de cuenta AKCLLA62001390967L[.]eml

General

Target
Kimberly-Clark Solicitud de estado de cuenta AKCLLA62001390967L.eml
Size 23KB
Sample261029-2f3mkagx4r
SHA256 8e33b4d775df1838b9e989a571b32dc6b63a44c17cb66994c5feba551eac499b
MD5 cc7cfd523523c9f7696f4146d5de7e48
SHA1 2de214ae85ef19f3598e353a55ae9981ffdc3d1b
SHA512 2c1cad120fc518e72efc3bed96491c625bbe38afdb4c3ac2cbf086838de5304882112e24e50bef06fdba8340dfc3e912ce3e7218d169fdccf7184a5af5959463
SSDEEP 384:ndBbDYdqkxqMJWYsJTI6i3ssM3jx6yZY5G:bz/Mfs9Ip+j7ZYY
TLSH
T110B27D26E69B10C926F093D42AC3DE57E1002C882256D5B674E1D1BAFC8F057FB592CF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

Kimberly-Clark Solicitud de estado de cuenta AKCLLA62001390967L.eml

.eml 23KB
email-html-2.txt

.html 13KB
email-plain-1.txt

1KB

Kimberly-Clark Solicitud de estado de cuenta AKCLLA62001390967L.eml

SHA256 8e33b4d775df1838b9e989a571b32dc6b63a44c17cb66994c5feba551eac499b
MD5 cc7cfd523523c9f7696f4146d5de7e48
SHA1 2de214ae85ef19f3598e353a55ae9981ffdc3d1b
SHA512 2c1cad120fc518e72efc3bed96491c625bbe38afdb4c3ac2cbf086838de5304882112e24e50bef06fdba8340dfc3e912ce3e7218d169fdccf7184a5af5959463
SSDEEP 384:ndBbDYdqkxqMJWYsJTI6i3ssM3jx6yZY5G:bz/Mfs9Ip+j7ZYY
TLSH
T110B27D26E69B10C926F093D42AC3DE57E1002C882256D5B674E1D1BAFC8F057FB592CF
MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

To

[email protected]

From

[email protected]

Date

Thu, 29 Oct 2026 13:58:50 +0000

Subject

Kimberly-Clark Solicitud de estado de cuenta: AKCLLA62001390967L

Content-Type

multipart/alternative; boundary="_000_4e9bfc8074584903ad520c7f1be508e8USGBAXvNexIT02PJBANET_"

Received

from CYYPR16MB5506.namprd16.prod.outlook.com (::1) by DM6PR16MB3594.namprd16.prod.outlook.com with HTTPS; Thu, 29 Oct 2026 13:59:49 +0000

from CH5PR02CA0019.namprd02.prod.outlook.com (2603:10b6:610:1ed::12) by CYYPR16MB5506.namprd16.prod.outlook.com (2603:10b6:930:c0::21) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.569.8; Thu, 29 Oct 2026 13:59:39 +0000

from BN2PEPF0000A804.namprd02.prod.outlook.com (2603:10b6:610:1ed:cafe::27) by CH5PR02CA0019.outlook.office365.com (2603:10b6:610:1ed::12) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.546.22 via Frontend Transport; Thu, 29 Oct 2026 13:59:39 +0000

from webaccess.bi.com.gt (190.242.184.171) by BN2PEPF0000A804.mail.protection.outlook.com (10.167.245.168) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.569.4 via Frontend Transport; Thu, 29 Oct 2026 13:59:38 +0000

from SRVCTR026MAIL.bi-central.local (10.10.10.226) by webaccess.bi.com.gt (10.10.10.236) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.2562.43; Thu, 29 Oct 2026 07:57:48 -0600

from SRVCTR024MAIL.bi-central.local (10.1.1.205) by SRVCTR026MAIL.bi-central.local (10.2.215.164) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.2562.43; Thu, 29 Oct 2026 07:59:06 -0600

from outbound-ip137a.ess.barracuda.com (10.2.4.214) by SRVCTR024MAIL.bi-central.local (10.1.1.205) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.2562.43 via Frontend Transport; Thu, 29 Oct 2026 07:59:06 -0600

from us-smtp-delivery-160.mimecast.com (us-smtp-delivery-160.mimecast.com [170.10.133.160]) by mx-inbound11-237.us-east-2a.ess.aws.cudaops.com (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO); Thu, 29 Oct 2026 13:59:04 +0000

from USGBAXvNexIT02P.JBA.NET (216.250.228.51 [216.250.228.51]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id us-mta-676-gyaWnaZBMMSTpyUjN7G4-Q-14; Thu, 29 Oct 2026 09:59:02 -0400

Received-Spf

pass (mx-inbound11-237.us-east-2a.ess.aws.cudaops.com: domain of [email protected] designates 170.10.133.160 as permitted sender)

Message-Id

<[email protected]>

Sharing