Overview

overview

1

Static

static

1

=UTF-8BW+u...g=.eml

windows10-2004-x64

1

=UTF-8BW+u...g=.eml

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    =UTF-8BW+uhr+uNsOuqqOuwlOydvOyDge2SiOq2jF0gMjAyNuuFhCDtmozsm5Dri5jsnZgg=.eml
  • Size 41KB
  • Sample261030-htmcysxt9r
  • SHA256 54e4517fde72503d16cce4720155cc5335c95acb862ea22f5c02327e23b66241
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • =UTF-8BW+uhr+uNsOuqqOuwlOydvOyDge2SiOq2jF0gMjAyNuuFhCDtmozsm5Dri5jsnZgg=.eml
    .eml 41KB
  • email-html-1.txt
    .html 14KB

=UTF-8BW+uhr+uNsOuqqOuwlOydvOyDge2SiOq2jF0gMjAyNuuFhCDtmozsm5Dri5jsnZgg=.eml

  • SHA256 54e4517fde72503d16cce4720155cc5335c95acb862ea22f5c02327e23b66241
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

[email protected]

Date

Tue, 27 Oct 2026 21:02:08 +0900

Subject

=?UTF-8?B?W+uhr+uNsOuqqOuwlOydvOyDge2SiOq2jF0gMjAyNuuFhCDtmozsm5Dri5jsnZgg?= =?UTF-8?B?6rCc7J247KCV67O0IOydtOyaqeuCtOyXreydhCDslYjrgrQg65Oc66a964uI64ukLg==?=

Content-Type

text/html; charset=UTF-8

Received

from GV1PR03MB10504.eurprd03.prod.outlook.com (2603:10a6:150:16d::10) by AS2PR03MB9561.eurprd03.prod.outlook.com with HTTPS; Tue, 27 Oct 2026 12:02:16 +0000

from PAZP264CA0226.FRAP264.PROD.OUTLOOK.COM (2603:10a6:102:238::17) by GV1PR03MB10504.eurprd03.prod.outlook.com (2603:10a6:150:16d::10) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.546.22; Tue, 27 Oct 2026 12:02:14 +0000

from MAD0EPF000008AB.eurprd04.prod.outlook.com (2603:10a6:102:238:cafe::15) by PAZP264CA0226.outlook.office365.com (2603:10a6:102:238::17) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.546.22 via Frontend Transport; Tue, 27 Oct 2026 12:02:13 +0000

from esa.hc1191-61.eu.iphmx.com (23.90.122.49) by MAD0EPF000008AB.mail.protection.outlook.com (10.167.241.183) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.569.4 via Frontend Transport; Tue, 27 Oct 2026 12:02:13 +0000

from maila.lottegift.co.kr ([124.243.76.22]) by esa3.hc1191-61.eu.iphmx.com with SMTP; 27 Oct 2026 05:02:07 -0700

Received-Spf

SoftFail (protection.outlook.com: domain of transitioning lottegift.co.kr discourages use of 23.90.122.49 as permitted sender)

None (esa.hc1191-61.eu.iphmx.com: no sender authenticity information available from domain of [email protected]) identity=pra; client-ip=124.243.76.22; receiver=esa.hc1191-61.eu.iphmx.com; envelope-from="[email protected]"; x-sender="[email protected]"; x-conformance=sidf_compatible

Pass (esa.hc1191-61.eu.iphmx.com: domain of [email protected] designates 124.243.76.22 as permitted sender) identity=mailfrom; client-ip=124.243.76.22; receiver=esa.hc1191-61.eu.iphmx.com; envelope-from="[email protected]"; x-sender="[email protected]"; x-conformance=sidf_compatible; x-record-type="v=spf1"; x-record-text="v=spf1 ip4:124.243.76.22 ip4:124.243.76.23 ip4:223.253.100.0/24 ~all"

None (esa.hc1191-61.eu.iphmx.com: no sender authenticity information available from domain of [email protected]) identity=helo; client-ip=124.243.76.22; receiver=esa.hc1191-61.eu.iphmx.com; envelope-from="[email protected]"; x-sender="[email protected]"; x-conformance=sidf_compatible

X-Mailer

Netpion Enterprise v4.0/Scheduler v4.0.1

Message-Id

<[email protected]>

Extracted URLs

  • file https://aka.ms/LearnAboutSenderIdentification