General

  • Target
    Payment Confirmed_ USD 427.98 – Amazon.eml
  • Size 20KB
  • Sample261029-yvbkvacc95
  • SHA256 ec34608a03d94146af14e6f5d2a56929d31e91f8832d720ab130bb56a8a3e984
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • Payment Confirmed_ USD 427.98 – Amazon.eml
    .eml 20KB
  • email-html-2.txt
    .html 7KB
  • email-plain-1.txt
    1KB

Payment Confirmed_ USD 427.98 – Amazon.eml

  • SHA256 ec34608a03d94146af14e6f5d2a56929d31e91f8832d720ab130bb56a8a3e984
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Delivered-To

[email protected]

Sender

Dewitt Bogisich <IMCEAEX-_O=FIRST+20ORGANIZATION_OU=EXCHANGE+20ADMINISTRATIVE+20GROUP+28FYDIBOHF23SPDLT+[email protected]>

Return-Path

<bounces+[email protected]>

Date

Thu, 29 Oct 2026 18:00:34 +0000

Subject

=?Windows-1252?Q?Payment_Confirmed:_USD_427.98_=96_Amazon?=

Content-Type

multipart/alternative; boundary="_000_PH7PR11MB58628F2A42A81238984C5CBA9F6E2PH7PR11MB5862namp_"

Received

by 2002:a05:7209:e246:20b0:112:3284:bb7 with SMTP id aw6-n2csp1083127rbd; Thu, 29 Oct 2026 11:00:45 -0700 (PDT)

from SN4PR2101CU001.outbound.protection.outlook.com (mail-southcentralusazolkn190120000.outbound.protection.outlook.com. [2a01:111:f403:d114::]) by mx.google.com with ESMTPS id 00721157ae682-8b2b3a61078si1678097b3.54.2026.10.29.11.00.44 for <[email protected]> (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 29 Oct 2026 11:00:45 -0700 (PDT)

from PH7PR11MB5862.namprd11.prod.outlook.com (2603:10b6:510:134::6) by MN2PR11MB4726.namprd11.prod.outlook.com (2603:10b6:208:269::7) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.569.8; Thu, 29 Oct 2026 18:00:34 +0000

from PH7PR11MB5862.namprd11.prod.outlook.com ([fe80::e024:3f58:673e:11e6]) by PH7PR11MB5862.namprd11.prod.outlook.com ([fe80::e024:3f58:673e:11e6%5]) with mapi id 15.21.0569.008; Thu, 29 Oct 2026 18:00:34 +0000

X-Received

by 2002:a05:690c:18:b0:8b0:cd32:b8dd with SMTP id 00721157ae682-8b1c6701c87mr26629397b3.17.1793296845262; Thu, 29 Oct 2026 11:00:45 -0700 (PDT)

Received-Spf

pass (google.com: domain of bounces+[email protected] designates 2a01:111:f403:d114:: as permitted sender) client-ip=2a01:111:f403:d114::;

Message-Id

<PH7PR11MB58628F2A42A81238984C5CBA9F6E2@PH7PR11MB5862.namprd11.prod.outlook.com>