Static

static

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    copia.eml (106 KB).msg
  • Size 162KB
  • Sample261102-llsrjsef78
  • SHA256 c7f6b72bd971bc10137571379bf7ef253c4d2facd72e2a97fd66480cf995efbc
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • copia.eml (106 KB).msg
    .msg 162KB

copia.eml (106 KB).msg

  • SHA256 c7f6b72bd971bc10137571379bf7ef253c4d2facd72e2a97fd66480cf995efbc
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Date

Fri, 30 Oct 2026 15:52:48 +0100 (CET)

Subject

POSTA CERTIFICATA: Diffida di Pagamento Pos. 240097030002 ETAI /DOMO SRL

Content-Type

multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-256; boundary="----=_Part_49570930_1070334960.1793371968773"

Received

from mx.cert.legalmail.it ([10.227.28.36]) by mta-ddfc6db76-tswxj.mx.internal with ESMTP id <20261030145249.MWVB328.mta-ddfc6db76-tswxj.mx.internal@mx.cert.legalmail.it> for <[email protected]>; Fri, 30 Oct 2026 14:52:49 +0000

from smtps.pec.aruba.it (80.88.94.23) by mx.cert.legalmail.it id 6A217D450BE58997 for [email protected]; Fri, 30 Oct 2026 15:52:49 +0100

from smtps.pec.aruba.it (localhost [127.0.0.1]) by smtps.pec.aruba.it (Postfix) with ESMTP id 4jGPGS5h0tzFj for <[email protected]>; Fri, 30 Oct 2026 14:52:48 +0000 (UTC)

from shared-jpec-sh-6.shared-jpec-sh.rem-aruba-is1.svc.cluster.local (shared-jpec-sh-6.shared-jpec-sh.rem-aruba-is1.svc.cluster.local [10.232.85.188]) by smtps.pec.aruba.it (Postfix) with ESMTP id 4jGPGS5cZqzFS for <[email protected]>; Fri, 30 Oct 2026 14:52:48 +0000 (UTC)

from shared-smtp-dovecot-submission-ffdc9 ([10.232.75.135]) by shared-smtp-sh-5.shared-smtp-sh.rem-aruba-is1.svc.cluster.local with ESMTPA id xYfkEECv5Gp4IwAA0NrMyg (envelope-from <[email protected]>) for <[email protected]>; Fri, 30 Oct 2026 14:52:48 +0000

Message-Id

<[email protected]>

Extracted URLs

  • file http://legalmail.it

  • file http://pec.aruba.it

  • file http://pec.it