General

  • Target
    Suspeita de burla online - Sónia Pinto Nif 216767768.eml
  • Size 1.3MB
  • Sample261030-mvsctayv2r
  • SHA256 b6b958c7fe272615effb39de8e718915528c860f17f1ae559adc23f80a4fff30
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • Suspeita de burla online - Sónia Pinto Nif 216767768.eml
    .eml 1.3MB
  • 1000114834.jpg
    .jpg 532KB
  • 1000114839.jpg
    .jpg 255KB
  • 1000114840.jpg
    .jpg 154KB
  • email-html-2.txt
    .html 2KB
  • email-plain-1.txt
    1KB

Suspeita de burla online - Sónia Pinto Nif 216767768.eml

  • SHA256 b6b958c7fe272615effb39de8e718915528c860f17f1ae559adc23f80a4fff30
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

alertaseguranca+[email protected]

Date

Wed, 28 Oct 2026 11:18:18 +0000

Subject

=?UTF-8?Q?Suspeita_de_burla_online_=2D_S=C3=B3nia_Pinto_Nif_21676776?= =?UTF-8?Q?8?=

Content-Type

multipart/mixed; boundary="0000000000001299ae065ee4b90e"

Received

from AS8PR03MB10174.eurprd03.prod.outlook.com (::1) by AM0PR03MB4562.eurprd03.prod.outlook.com with HTTPS; Wed, 28 Oct 2026 11:19:00 +0000

from PR3P189CA0075.EURP189.PROD.OUTLOOK.COM (2603:10a6:102:b4::20) by AS8PR03MB10174.eurprd03.prod.outlook.com (2603:10a6:20b:5b0::17) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.546.22; Wed, 28 Oct 2026 11:18:53 +0000

from MI3PEPF0000849A.eurprd03.prod.outlook.com (2603:10a6:102:b4:cafe::4b) by PR3P189CA0075.outlook.office365.com (2603:10a6:102:b4::20) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.569.7 via Frontend Transport; Wed, 28 Oct 2026 11:18:53 +0000

from nat.eu.perception-point.io (99.80.189.20) by MI3PEPF0000849A.mail.protection.outlook.com (10.167.240.185) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.546.15 via Frontend Transport; Wed, 28 Oct 2026 11:18:52 +0000

from DUZPR08CU001.outbound.protection.outlook.com (mail-duzpr08cu00107.outbound.protection.outlook.com [40.93.64.71]) by inbound-smtp.eu-west-1.amazonaws.com with SMTP id q88n5k0qeh2lochg1bqjq02iaiqig9el6ej3c201 for [email protected]; Wed, 28 Oct 2026 11:18:50 +0000 (UTC)

from DUZPR01CA0176.eurprd01.prod.exchangelabs.com (2603:10a6:10:4b3::12) by PAWPR03MB9809.eurprd03.prod.outlook.com (2603:10a6:102:2e4::7) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.546.22; Wed, 28 Oct 2026 11:18:42 +0000

from DB1PEPF00050A01.eurprd03.prod.outlook.com (2603:10a6:10:4b3:cafe::3c) by DUZPR01CA0176.outlook.office365.com (2603:10a6:10:4b3::12) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.546.22 via Frontend Transport; Wed, 28 Oct 2026 11:18:42 +0000

from MRWPR03CU001.outbound.protection.outlook.com (2a01:111:f403:c207::3) by DB1PEPF00050A01.mail.protection.outlook.com (2603:10a6:18:3::6db) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.569.4 via Frontend Transport; Wed, 28 Oct 2026 11:18:41 +0000

from ZR0P278CA0131.CHEP278.PROD.OUTLOOK.COM (2603:10a6:910:40::10) by PAVPR10MB6986.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:102:305::7) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.569.7; Wed, 28 Oct 2026 11:18:32 +0000

from ZR1PEPF0000E6AD.eurprd05.prod.outlook.com (2603:10a6:910:40:cafe::2a) by ZR0P278CA0131.outlook.office365.com (2603:10a6:910:40::10) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.546.22 via Frontend Transport; Wed, 28 Oct 2026 11:18:32 +0000

from mail-ej1-x62e.google.com (2a00:1450:4864:20::62e) by ZR1PEPF0000E6AD.mail.protection.outlook.com (2603:10a6:918::154) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.569.4 via Frontend Transport; Wed, 28 Oct 2026 11:18:31 +0000

by mail-ej1-x62e.google.com with SMTP id a640c23a62f3a-c3f04e0e65fso133555966b.2 for <[email protected]>; Wed, 28 Oct 2026 04:18:31 -0700 (PDT)

X-Received

by 2002:a17:906:eec8:b0:c35:babe:ab44 with SMTP id a640c23a62f3a-c49bd9fe12cmr188048766b.0.1793186310792; Wed, 28 Oct 2026 04:18:30 -0700 (PDT)

Received-Spf

Fail (protection.outlook.com: domain of wizink.pt does not designate 99.80.189.20 as permitted sender) receiver=protection.outlook.com; client-ip=99.80.189.20; helo=nat.eu.perception-point.io;

pass (spfCheck: domain of wizink.pt designates 40.93.64.71 as permitted sender) client-ip=40.93.64.71; envelope-from=alertaseguranca+[email protected]; helo=DUZPR08CU001.outbound.protection.outlook.com;

Pass (protection.outlook.com: domain of wizink.pt designates 2a01:111:f403:c207::3 as permitted sender) receiver=protection.outlook.com; client-ip=2a01:111:f403:c207::3; helo=MRWPR03CU001.outbound.protection.outlook.com; pr=C

Pass (protection.outlook.com: domain of gmail.com designates 2a00:1450:4864:20::62e as permitted sender) receiver=protection.outlook.com; client-ip=2a00:1450:4864:20::62e; helo=mail-ej1-x62e.google.com; pr=C

Message-Id

<CAKLz45kdufGNu=XzTLF2-aTJAV9uf61b=v=9VS50M0siBNu=Vw@mail.gmail.com>