Overview

overview

3

Static

static

1

Potential ...B).msg

windows10-2004-x64

3

Potential ...B).msg

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    Potential Phish (25.4 KB).msg
  • Size 57KB
  • Sample261102-sqavvsvtc1
  • SHA256 2cf8a1e3961a4a27d8b7d4aa791f150204a4d33fa1ad414068ecf23154c58ef5
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • Potential Phish (25.4 KB).msg
    .msg 57KB

Potential Phish (25.4 KB).msg

  • SHA256 2cf8a1e3961a4a27d8b7d4aa791f150204a4d33fa1ad414068ecf23154c58ef5
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

010f01a199998697-a64ad25c-7a41-4675-b03c-715b1a29670d-000000@mail11.docusign.net

Date

Mon, 2 Nov 2026 00:12:17 +0000

Subject

Your Electronic Signature Is Requested

Content-Type

multipart/alternative; boundary="===============1379589480982204345=="

Received

from BY5PR04MB6994.namprd04.prod.outlook.com (2603:10b6:a03:228::19) by BN0PR04MB8126.namprd04.prod.outlook.com with HTTPS; Mon, 2 Nov 2026 00:12:24 +0000

from BY1P220CA0002.NAMP220.PROD.OUTLOOK.COM (2603:10b6:a03:59d::6) by BY5PR04MB6994.namprd04.prod.outlook.com (2603:10b6:a03:228::19) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.569.12; Mon, 2 Nov 2026 00:12:20 +0000

from SJ1PEPF000023CD.namprd02.prod.outlook.com (2603:10b6:a03:59d:cafe::76) by BY1P220CA0002.outlook.office365.com (2603:10b6:a03:59d::6) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.569.12 via Frontend Transport; Mon, 2 Nov 2026 00:12:20 +0000

from mx0b-00332601.pphosted.com (148.163.137.252) by SJ1PEPF000023CD.mail.protection.outlook.com (10.167.244.8) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.592.5 via Frontend Transport; Mon, 2 Nov 2026 00:12:19 +0000

from pps.filterd (m0266390.ppops.net [127.0.0.1]) by mx0a-00332601.pphosted.com (8.18.1.11/8.18.1.11) with ESMTP id 6A1NLQ3a2376923 for <[email protected]>; Mon, 2 Nov 2026 00:12:18 GMT

from i85-181.smtp-out.us-east-2.amazonses.com (i85-181.smtp-out.us-east-2.amazonses.com [24.110.85.181]) by mx0a-00332601.pphosted.com (PPS) with ESMTPS id 4hn69vtrnf-1 (version=TLSv1.3 cipher=TLS_AES_128_GCM_SHA256 bits=128 verify=NOT) for <[email protected]>; Mon, 02 Nov 2026 00:12:18 +0000 (GMT)

Received-Spf

Fail (protection.outlook.com: domain of mail11.docusign.net does not designate 148.163.137.252 as permitted sender) receiver=protection.outlook.com; client-ip=148.163.137.252; helo=mx0b-00332601.pphosted.com;

Message-Id

<010f01a199998697-a64ad25c-7a41-4675-b03c-715b1a29670d-000000@us-east-2.amazonses.com>

Extracted URLs

  • file http://DocuSign.com

  • file http://schema.org/CreativeWork

  • file http://schema.org/EmailMessage

  • file http://schema.org/ViewAction

  • file https://2jxqrkdd.r.us-east-2.awstrack.me/I0/010f01a199998697-a64ad25c-7a41-4675-b03c-715b1a29670d-000000/4k7TK1e9HPk17yzY9vM6iE3OJQ4=258

  • file https://NA4.docusign.net/Member/Image.aspx?i=logo&amp;l=a35486e3-1eb0-472e-9573-9bd22518e091

  • file https://NA4.docusign.net/Member/Image.aspx?i=logo&l=a35486e3-1eb0-472e-9573-9bd22518e091

  • file https://NA4.docusign.net/member/Images/email/docInvite-white.png

  • file https://docucdn-a.akamaihd.net/olive/images/2.62.0/global-assets/email-templates/icon-download-app.png

  • Show all