Overview

overview

1

Static

static

1

Potential ...B).msg

windows10-2004-x64

1

Potential ...B).msg

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    Potential Phish (14.9 KB).msg
  • Size 47KB
  • Sample261102-rx8j2acy7n
  • SHA256 3002b4048f298d6c803b7efbcdb02d543ce868bbd5ac679b7335f70aa3945e57
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • Potential Phish (14.9 KB).msg
    .msg 47KB

Potential Phish (14.9 KB).msg

  • SHA256 3002b4048f298d6c803b7efbcdb02d543ce868bbd5ac679b7335f70aa3945e57
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

[email protected]

Date

Wed, 28 Oct 2026 14:11:54 +0000

Subject

2027 Education Day - Gwinnett Stripers

Content-Type

multipart/alternative; boundary="===============6525674434977400582=="

Received

from CO1PR04MB8299.namprd04.prod.outlook.com (2603:10b6:303:156::19) by SA1PR04MB8888.namprd04.prod.outlook.com with HTTPS; Wed, 28 Oct 2026 14:18:29 +0000

from DS1P222CA0016.NAMP222.PROD.OUTLOOK.COM (2603:10b6:8:44b::12) by CO1PR04MB8299.namprd04.prod.outlook.com (2603:10b6:303:156::19) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.546.18; Wed, 28 Oct 2026 14:18:24 +0000

from CH2PEPF000166C0.namprd04.prod.outlook.com (2603:10b6:8:44b:cafe::42) by DS1P222CA0016.outlook.office365.com (2603:10b6:8:44b::12) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.546.22 via Frontend Transport; Wed, 28 Oct 2026 14:18:23 +0000

from mx0a-00332601.pphosted.com (148.163.133.252) by CH2PEPF000166C0.mail.protection.outlook.com (10.167.252.10) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.569.4 via Frontend Transport; Wed, 28 Oct 2026 14:18:23 +0000

from pps.filterd (m0266389.ppops.net [127.0.0.1]) by mx0a-00332601.pphosted.com (8.18.1.11/8.18.1.11) with ESMTP id 69SBesQI1760279 for <[email protected]>; Wed, 28 Oct 2026 14:18:22 GMT

from us-smtp-delivery-185.mimecast.com (us-smtp-delivery-185.mimecast.com [170.10.129.185]) by mx0a-00332601.pphosted.com (PPS) with ESMTPS id 4hkd4612ru-1 (version=TLSv1.3 cipher=TLS_AES_256_GCM_SHA384 bits=256 verify=NOT) for <[email protected]>; Wed, 28 Oct 2026 14:18:22 +0000 (GMT)

from DM1PR04CU001.outbound.protection.outlook.com (mail-centralusazon11020112.outbound.protection.outlook.com [52.101.61.112]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.3, cipher=TLS_AES_256_GCM_SHA384) id us-mta-269-3sYlqPG5PK-qwNktUaPAZQ-2; Wed, 28 Oct 2026 10:18:17 -0400

from SJ0PR22MB2544.namprd22.prod.outlook.com (2603:10b6:a03:321::12) by LV3PR22MB5795.namprd22.prod.outlook.com (2603:10b6:408:27a::20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.569.8; Wed, 28 Oct 2026 14:18:14 +0000

from SJ0PR22MB2512.namprd22.prod.outlook.com ([fe80::3c53:7259:200e:22e8]) by SJ0PR22MB2544.namprd22.prod.outlook.com ([fe80::3c53:7259:200e:22e8%5]) with mapi id 15.21.0569.007; Wed, 28 Oct 2026 14:18:13 +0000

Received-Spf

Fail (protection.outlook.com: domain of gostripers.com does not designate 148.163.133.252 as permitted sender) receiver=protection.outlook.com; client-ip=148.163.133.252; helo=mx0a-00332601.pphosted.com;

Message-Id

<SJ0PR22MB2512566B76A90FCC4C7A9F3F9A6F2@SJ0PR22MB2512.namprd22.prod.outlook.com>