Overview

overview

7

Static

static

1

Transform ...se.eml

windows10-2004-x64

7

Transform ...se.eml

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    Transform fragmented security operations into a unified defense.eml
  • Size 64KB
  • Sample261102-ffs78szzcy
  • SHA256 4484a498a4459b148a8a12b75b351e130b41074c50e33390e1beeda4afef3499
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • Transform fragmented security operations into a unified defense.eml
    .eml 64KB
  • email-html-2.txt
    .html 32KB
  • email-plain-1.txt
    4KB

Transform fragmented security operations into a unified defense.eml

  • SHA256 4484a498a4459b148a8a12b75b351e130b41074c50e33390e1beeda4afef3499
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

[email protected]

Date

Fri, 30 Oct 2026 08:37:48 +0000

Subject

Transform fragmented security operations into a unified defense

Content-Type

multipart/alternative; boundary="=_d955c1433c7c147ddfe4475b1416720f"

Received

from AS2PR03MB9646.eurprd03.prod.outlook.com (2603:10a6:20b:5ea::14) by AS4PR03MB8412.eurprd03.prod.outlook.com with HTTPS; Fri, 30 Oct 2026 08:43:06 +0000

from DUZP191CA0049.EURP191.PROD.OUTLOOK.COM (2603:10a6:10:4fa::24) by AS2PR03MB9646.eurprd03.prod.outlook.com (2603:10a6:20b:5ea::14) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.569.10; Fri, 30 Oct 2026 08:42:10 +0000

from MA3PEPF00000409.eurprd04.prod.outlook.com (2603:10a6:10:4fa:cafe::9a) by DUZP191CA0049.outlook.office365.com (2603:10a6:10:4fa::24) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.569.9 via Frontend Transport; Fri, 30 Oct 2026 08:42:10 +0000

from esa.hc1191-61.eu.iphmx.com (23.90.122.49) by MA3PEPF00000409.mail.protection.outlook.com (10.167.241.154) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.569.4 via Frontend Transport; Fri, 30 Oct 2026 08:42:10 +0000

from relay17.rot1.mysmtp.mobi ([185.99.120.78]) by esa4.hc1191-61.eu.iphmx.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 30 Oct 2026 01:42:16 -0700

from [non-disclosed] for <[email protected]>; Fri, 30 Oct 2026 09:37:48 +0100 (CET)

Received-Spf

SoftFail (protection.outlook.com: domain of transitioning bounce.marketinginfosolutions.com discourages use of 23.90.122.49 as permitted sender)

None (esa.hc1191-61.eu.iphmx.com: no sender authenticity information available from domain of [email protected]) identity=pra; client-ip=185.99.120.78; receiver=esa.hc1191-61.eu.iphmx.com; envelope-from="[email protected]"; x-sender="[email protected]"; x-conformance=sidf_compatible

Pass (esa.hc1191-61.eu.iphmx.com: domain of [email protected] designates 185.99.120.78 as permitted sender) identity=mailfrom; client-ip=185.99.120.78; receiver=esa.hc1191-61.eu.iphmx.com; envelope-from="[email protected]"; x-sender="[email protected]"; x-conformance=sidf_compatible; x-record-type="v=spf1"; x-record-text="v=spf1 ip4:185.99.120.0/24 ip4:185.99.121.0/24 ip4:185.99.122.0/24 ip4:185.99.123.0/24 ~all"

None (esa.hc1191-61.eu.iphmx.com: no sender authenticity information available from domain of [email protected]) identity=helo; client-ip=185.99.120.78; receiver=esa.hc1191-61.eu.iphmx.com; envelope-from="[email protected]"; x-sender="[email protected]"; x-conformance=sidf_compatible

Message-Id

<[email protected]>

Extracted URLs

  • file https://aka.ms/LearnAboutSenderIdentification

  • file https://track.marketinginfosolutions.com/?xtl=27yi2g79w14n57fstt3bw49auli1wqvbjv6cj2bmwgke19zspxpolht7gd6mna8up2h6hfguicf7fao8k7vxh2yf6ph7b0a4ibtzi0yuiwiq9u8dsehwts1yivujr9kgl027rsa8y0jkrimnawpj0fzrejie1k26c3fpemr7dsm8c6tex1g7qdy85g6d3x5diop90wj2gcf9m2f6hh05vm0cn61d5fj4jgicat1dvebgepl1ged2wshpkxbu&eih=lahdjxvo3iil8ia109409hbwc5313u9p&__stmp=tnppb0&__onlt=h&ocx_contact_id=65c9225b42bb0326138b45fc

  • file https://track.marketinginfosolutions.com/?xtl=slbrjs2mzgaluo1sa9dh9umeml9v4sk26fmeah0jvqr7qtdgyj425i0jzc8mmsjl38fv2hhy1c3i78cyee2zd7vxym6mem84opbg33s57vpewtvjo8bsa4dizz6wyl7x95jknk42iel23nkpaplifh39jw3b5qtp2wm0uxzrtkiy0hcfts9rz94h77yy60m7p8p22tk5ux16etzwiiu6h9w3vlgix7nayggteg0dyy4z6h3rl093xq9cju9fv7lvx5n9uxl5yplx9c&eih=lahdjxvo3iil8ia109409hbwc5313u9p&__stmp=tnppb0&__onlt=h&ocx_contact_id=65c9225b42bb0326138b45fc

  • file https://track.marketinginfosolutions.com/?xtl=zh8c4xkl82yogmahnysj8kxprdzbv2ubtfsmh9zwhlbczdbq2m2i2u34gk2tndct8r33s85u2cn1p9l4t315v7q7xxjq7ze40ovguxkhpv70lo2b242oubfb3bpytax0nv3jympib7g7nyzlcvmyhu2433zohlnxohac12a20p01fb0g7q5h5bccfjelln7lwd28klk26j2fytgpcv2z2l3j43n9kmekll2kp0xpssdoowjybzkeglvk7cdd5ig58nycnthma6vugmzt2&eih=lahdjxvo3iil8ia109409hbwc5313u9p&__stmp=tnppb0&__onlt=h&ocx_contact_id=65c9225b42bb0326138b45fc

  • file https://track.marketinginfosolutions.com/?xtl=zh8c4xkl82yogmahnysj8kxprdzbv2ubtfsmh9zwhlbczdbq2m2i2u34gk2tndct8r33s85u2cn1p9l4t315v7q7xy0jidre2t3gj4pwi0tlb39htu42631yldsw0g2o2lrfwlfcnlq8vwm01b582rc7xvdisb0w435s6gql0zrwk6k4965c24l5ny20dlyz79f70pom7ed2gtnisn6eumn6265nz9nla4x1kkek1u5m4mtvcsherd5v2anlpc31ypwdk7k4qyxpjy5bz&eih=lahdjxvo3iil8ia109409hbwc5313u9p&__stmp=tnppb0&__onlt=h&ocx_contact_id=65c9225b42bb0326138b45fc

  • file https://track.marketinginfosolutions.com/?xul=1ij1oqiile1xruo4it4msf52uqx7oft6wf92wdaydu63ne3juulmya3j7lpfithl4wgbs09uqvxu36ab645m1sc3gmk5drxwrnxzqohqgq3uuhhgqptet99&__stmp=tnppb0&eih=lahdjxvo3iil8ia109409hbwc5313u9p