Resubmissions

29/10/2026, 20:33

261029-zcc7dscd456

29/10/2026, 20:31

261029-zaq1gats4k

29/10/2026, 20:15

261029-y1m6tsew4z6

29/10/2026, 20:10

261029-yxrd3sew3w6

General

  • Target
    phish_alert_sp2_2.0.0.0.eml
  • Size 231KB
  • Sample261029-zcc7dscd45
  • SHA256 c868adbc454a83c02ec582fafa4643cdd848c190d3c07736611d152b5b382566
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
pdf

Malware Config

Signatures

  • PDF contains one or more embedded files

    Detects presence of embedded files in PDF files.

File Explorer

  • phish_alert_sp2_2.0.0.0.eml
    .eml 231KB
  • Global_Telecom_CLM_2026.pdf
    .pdf 156KB
  • Content Credentials
    23KB
  • email-html-1.txt
    .html 6KB

phish_alert_sp2_2.0.0.0.eml

  • SHA256 c868adbc454a83c02ec582fafa4643cdd848c190d3c07736611d152b5b382566
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

[email protected]

Date

Wed, 28 Oct 2026 19:23:10 +0000

Subject

=?UTF-8?B?UkU6IEN1c3RvbWVyIExpZmVjeWNsZSBNYW5hZ2VtZW50IFN0cmF0?= =?UTF-8?B?ZWdpZXMgMjAyNg==?=

Content-Type

multipart/mixed; boundary="----sinikael-?=_1-17932165143910.49967517737536105"

Received

from SJ5PPF72821E123.namprd16.prod.outlook.com (2603:10b6:a0f:fc02::ad2) by DSWPR16MB271299.namprd16.prod.outlook.com with HTTPS; Wed, 28 Oct 2026 19:23:29 +0000

from MW4P222CA0001.NAMP222.PROD.OUTLOOK.COM (2603:10b6:303:114::6) by SJ5PPF72821E123.namprd16.prod.outlook.com (2603:10b6:a0f:fc02::ad2) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.546.22; Wed, 28 Oct 2026 19:23:16 +0000

from SJ1PEPF0000231F.namprd03.prod.outlook.com (2603:10b6:303:114:cafe::a1) by MW4P222CA0001.outlook.office365.com (2603:10b6:303:114::6) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.569.7 via Frontend Transport; Wed, 28 Oct 2026 19:23:15 +0000

from bumble.birch.relay.mailchannels.net (23.83.209.25) by SJ1PEPF0000231F.mail.protection.outlook.com (10.167.242.235) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.569.4 via Frontend Transport; Wed, 28 Oct 2026 19:23:15 +0000

from relay.mailchannels.net (localhost [127.0.0.1]) by relay.mailchannels.net (Postfix) with ESMTP id 9C0FF7A2923 for <[email protected]>; Wed, 28 Oct 2026 19:23:14 +0000 (UTC)

from de-fra-smtpout6.hostinger.io (trex-green-1.trex.outbound.svc.cluster.local [100.96.2.229]) (Authenticated sender: hostingeremail) by relay.mailchannels.net (Postfix) with ESMTPA id 6A0087A0CB5 for <[email protected]>; Wed, 28 Oct 2026 19:23:13 +0000 (UTC)

from de-fra-smtpout6.hostinger.io (de-fra-smtpout6.hostinger.io [148.222.55.17]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384) by 100.96.2.229 (trex/8.0.2); Wed, 28 Oct 2026 19:23:14 +0000

from laptop-u96g1h6l.local (unknown [IPv6:2405:201:5002:4b23:286d:89cf:c489:2ae]) (Authenticated sender: [email protected]) by smtp.hostinger.com (smtp.hostinger.com) with ESMTPSA id 4jFHML30j5z3wZ4 for <[email protected]>; Wed, 28 Oct 2026 19:23:10 +0000 (UTC)

Received-Spf

Pass (protection.outlook.com: domain of telcopedia.com designates 23.83.209.25 as permitted sender) receiver=protection.outlook.com; client-ip=23.83.209.25; helo=bumble.birch.relay.mailchannels.net; pr=C

Message-Id

<[email protected]>