General

  • Target
    Reclamaciones IB-Comdata 28102026 _0005247241009096241_12382800Z.eml
  • Size 53KB
  • Sample261102-j67ebsav7n
  • SHA256 bda2e5bd6aa9b4b600405875ed537b12ad9dfaf2c38d27f842e3d95d36b3d49c
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • Reclamaciones IB-Comdata 28102026 _0005247241009096241_12382800Z.eml
    .eml 53KB
  • attachment-3
    .eml 15KB
  • email-html-2.txt
    .html 8KB
  • email-plain-1.txt
    1KB
  • email-html-2.txt
    .html 6KB
  • email-plain-1.txt
    1KB

Reclamaciones IB-Comdata 28102026 _0005247241009096241_12382800Z.eml

  • SHA256 bda2e5bd6aa9b4b600405875ed537b12ad9dfaf2c38d27f842e3d95d36b3d49c
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

In-Reply-To

VI1PR10MB2288411B8277E80C6082D052BD602@VI1PR10MB2288.EURPRD10.PROD.OUTLOOK.COM

Return-Path

[email protected]

Date

Wed, 28 Oct 2026 14:18:29 +0000

Subject

Reclamaciones IB-Comdata 28102026 *0005247241009096241 12382800Z

Content-Type

multipart/mixed; boundary="_004_GV2PR10MB6621566BF8C10C896FE1A74ADB6F2GV2PR10MB6621EURP_"

Received

from DU4PR03MB11534.eurprd03.prod.outlook.com (2603:10a6:10:630::16) by AM0PR03MB4562.eurprd03.prod.outlook.com with HTTPS; Wed, 28 Oct 2026 14:18:50 +0000

from FR4P281CA0091.DEUP281.PROD.OUTLOOK.COM (2603:10a6:d10:cb::20) by DU4PR03MB11534.eurprd03.prod.outlook.com (2603:10a6:10:630::16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.546.22; Wed, 28 Oct 2026 14:18:47 +0000

from MI3PEPF00008484.eurprd02.prod.outlook.com (2603:10a6:d10:cb:cafe::1d) by FR4P281CA0091.outlook.office365.com (2603:10a6:d10:cb::20) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.569.7 via Frontend Transport; Wed, 28 Oct 2026 14:18:47 +0000

from nat.eu.perception-point.io (99.80.189.20) by MI3PEPF00008484.mail.protection.outlook.com (10.167.240.171) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.569.4 via Frontend Transport; Wed, 28 Oct 2026 14:18:47 +0000

from AM0PR07CU002.outbound.protection.outlook.com (mail-am0pr07cu00203.outbound.protection.outlook.com [40.93.65.67]) by inbound-smtp.eu-west-1.amazonaws.com with SMTP id mnsceummcgcsc0n378onr16gnhes1jf6cb9k6v81 for [email protected]; Wed, 28 Oct 2026 14:18:38 +0000 (UTC)

from OS6P279CA0096.NORP279.PROD.OUTLOOK.COM (2603:10a6:e10:3d::16) by AM7PR03MB6182.eurprd03.prod.outlook.com (2603:10a6:20b:140::13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.569.8; Wed, 28 Oct 2026 14:18:35 +0000

from WA1PEPF00009B3C.eurprd05.prod.outlook.com (2603:10a6:e10:3d:cafe::98) by OS6P279CA0096.outlook.office365.com (2603:10a6:e10:3d::16) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.546.22 via Frontend Transport; Wed, 28 Oct 2026 14:18:34 +0000

from AM0PR02CU008.outbound.protection.outlook.com (2a01:111:f403:c201::6) by WA1PEPF00009B3C.mail.protection.outlook.com (2603:10a6:1d8::11a) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.569.4 via Frontend Transport; Wed, 28 Oct 2026 14:18:34 +0000

from GV2PR10MB6621.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:150:b9::14) by AM0PR10MB3153.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:208:184::10) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.569.8; Wed, 28 Oct 2026 14:18:29 +0000

from GV2PR10MB6621.EURPRD10.PROD.OUTLOOK.COM ([fe80::140e:76ed:9be8:57be]) by GV2PR10MB6621.EURPRD10.PROD.OUTLOOK.COM ([fe80::140e:76ed:9be8:57be%7]) with mapi id 15.21.0569.007; Wed, 28 Oct 2026 14:18:29 +0000

Received-Spf

Fail (protection.outlook.com: domain of wizink.es does not designate 99.80.189.20 as permitted sender) receiver=protection.outlook.com; client-ip=99.80.189.20; helo=nat.eu.perception-point.io;

pass (spfCheck: domain of wizink.es designates 40.93.65.67 as permitted sender) client-ip=40.93.65.67; [email protected]; helo=AM0PR07CU002.outbound.protection.outlook.com;

Pass (protection.outlook.com: domain of wizink.es designates 2a01:111:f403:c201::6 as permitted sender) receiver=protection.outlook.com; client-ip=2a01:111:f403:c201::6; helo=AM0PR02CU008.outbound.protection.outlook.com; pr=C

Message-Id

<GV2PR10MB6621566BF8C10C896FE1A74ADB6F2@GV2PR10MB6621.EURPRD10.PROD.OUTLOOK.COM>

Extracted URLs

  • file http://www.grupokonecta.com/