General

  • Target
    abx_CloudMessage_WzM3ODEsICI4MmUyMWVkZi1mMzk5LTQ3NWEtODM4NC1mYzA1NGY5OTRmZmRAZGIzMzY3YjctMzc4Mi00MzFhLWJmYzgtNGMwYTU1ODdmNzE2IiwgIkFBa0FMZ0FBQUFBQUhZUURFYXBtRWMyYnlBQ3FBQy1FV2cwQWFhSDEzYWhyTVV5YVA2dzV6OUV5WHdBR.eml
  • Size 4.6MB
  • Sample261030-rmqlgacy3t
  • SHA256 78365839e5497a90b76096208960b9f691ea23427e95456bb0c5e68461a7a091
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • abx_CloudMessage_WzM3ODEsICI4MmUyMWVkZi1mMzk5LTQ3NWEtODM4NC1mYzA1NGY5OTRmZmRAZGIzMzY3YjctMzc4Mi00MzFhLWJmYzgtNGMwYTU1ODdmNzE2IiwgIkFBa0FMZ0FBQUFBQUhZUURFYXBtRWMyYnlBQ3FBQy1FV2cwQWFhSDEzYWhyTVV5YVA2dzV6OUV5WHdBR.eml
    .eml 4.6MB
  • 261029_94UU5_57019.bmp
    3.4MB
  • email-html-2.txt
    .html 330B
  • email-plain-1.txt
    129B

abx_CloudMessage_WzM3ODEsICI4MmUyMWVkZi1mMzk5LTQ3NWEtODM4NC1mYzA1NGY5OTRmZmRAZGIzMzY3YjctMzc4Mi00MzFhLWJmYzgtNGMwYTU1ODdmNzE2IiwgIkFBa0FMZ0FBQUFBQUhZUURFYXBtRWMyYnlBQ3FBQy1FV2cwQWFhSDEzYWhyTVV5YVA2dzV6OUV5WHdBR.eml

  • SHA256 78365839e5497a90b76096208960b9f691ea23427e95456bb0c5e68461a7a091
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Date

Thu, 29 Oct 2026 16:33:45 +0000

Subject

Your Exclusive Product Collection Details

Content-Type

multipart/related; boundary="_004_CAGdiEkzA0LEKK3LLXai26HayUNbN9KdA0K21tgTB2Gu69dTdwmailg_"; type="multipart/alternative"

Received

from MW4PR20MB5130.namprd20.prod.outlook.com (::1) by IA6PR20MB994521.namprd20.prod.outlook.com with HTTPS; Thu, 29 Oct 2026 16:33:59 +0000

from BL1P223CA0021.NAMP223.PROD.OUTLOOK.COM (2603:10b6:208:2c4::26) by MW4PR20MB5130.namprd20.prod.outlook.com (2603:10b6:303:1e2::18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.546.22; Thu, 29 Oct 2026 16:33:50 +0000

from BN2PEPF00004FBA.namprd04.prod.outlook.com (2603:10b6:208:2c4:cafe::96) by BL1P223CA0021.outlook.office365.com (2603:10b6:208:2c4::26) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.569.9 via Frontend Transport; Thu, 29 Oct 2026 16:33:49 +0000

from mail-dy1-x1329.google.com (2607:f8b0:4864:20::1329) by BN2PEPF00004FBA.mail.protection.outlook.com (2603:10b6:40f:fc02::174) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.569.4 via Frontend Transport; Thu, 29 Oct 2026 16:33:49 +0000

by mail-dy1-x1329.google.com with SMTP id 5a478bee46e88-35829219da8so1165623eec.0 for <[email protected]>; Thu, 29 Oct 2026 09:33:49 -0700 (PDT)

from 7641851296 named unknown by gmailapi.google.com with HTTPREST; Thu, 29 Oct 2026 09:33:45 -0700

from 7641851296 named unknown by gmailapi.google.com with HTTPREST; Thu, 29 Oct 2026 09:33:45 -0700

Received-Spf

Pass (protection.outlook.com: domain of gmail.com designates 2607:f8b0:4864:20::1329 as permitted sender) receiver=protection.outlook.com; client-ip=2607:f8b0:4864:20::1329; helo=mail-dy1-x1329.google.com; pr=C

Message-Id

<CAGdiEkzA0LEKK3LL+[email protected]>