Overview

overview

4

Static

static

1

34 LAssist...in.msg

windows10-2004-x64

4

34 LAssist...in.msg

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    34 LAssistant pour aller plus loin.msg
  • Size 144KB
  • Sample261102-srcqvaxs6q
  • SHA256 ba156ae7b594b4c4bca6759f1d1913cbf180e1aed1248afa30b73f2620762546
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • 34 LAssistant pour aller plus loin.msg
    .msg 144KB

34 LAssistant pour aller plus loin.msg

  • SHA256 ba156ae7b594b4c4bca6759f1d1913cbf180e1aed1248afa30b73f2620762546
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

[email protected]

Date

Mon, 02 Nov 2026 14:33:08 GMT

Subject

=?utf-8?q?[3/4]_L=E2=80=99Assistant_:_pour_aller_plus_loin?=

Content-Type

multipart/alternative; boundary=76102e3df28512ecf0dd1abf656135dd20de252be534d2e4da70e80d70d9

Received

from MRYP264MB6397.FRAP264.PROD.OUTLOOK.COM (2603:10a6:501:69::11) by PR0P264MB2837.FRAP264.PROD.OUTLOOK.COM with HTTPS; Mon, 2 Nov 2026 14:33:13 +0000

from LO3P265CA0009.GBRP265.PROD.OUTLOOK.COM (2603:10a6:600:bb::14) by MRYP264MB6397.FRAP264.PROD.OUTLOOK.COM (2603:10a6:501:69::11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.569.12; Mon, 2 Nov 2026 14:33:09 +0000

from PA1PEPF000CC3FA.FRAP264.PROD.OUTLOOK.COM (2603:10a6:600:bb:cafe::f) by LO3P265CA0009.outlook.office365.com (2603:10a6:600:bb::14) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.569.12 via Frontend Transport; Mon, 2 Nov 2026 14:33:09 +0000

from a-vga-rvega-3-x.dc.aviation (143.196.159.101) by PA1PEPF000CC3FA.mail.protection.outlook.com (10.167.242.5) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.592.5 via Frontend Transport; Mon, 2 Nov 2026 14:33:09 +0000

from relais3.lfpo.aviation-civile.gouv.fr (unknown [172.16.249.219]) by a-vga-rvega-3-x.dc.aviation (Relais VEGA PROD (Postfix)) with ESMTPS id 2F7E12000D for <[email protected]>; Mon, 2 Nov 2026 15:33:09 +0100 (CET)

from localhost (localhost [127.0.0.1]) by relais3.lfpo.aviation-civile.gouv.fr (Postfix) with ESMTP id 20501180029 for <[email protected]>; Mon, 2 Nov 2026 15:33:09 +0100 (CET)

from relais3.lfpo.aviation-civile.gouv.fr ([127.0.0.1]) by localhost (relais3.lfpo.aviation [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ySirKFKWCrnB for <[email protected]>; Mon, 2 Nov 2026 15:33:08 +0100 (CET)

from ae.d.mailin.fr (ae.d.mailin.fr [185.41.28.5]) by relais3.lfpo.aviation-civile.gouv.fr (Postfix) with ESMTPS id 88B21180025 for <[email protected]>; Mon, 2 Nov 2026 15:33:08 +0100 (CET)

Received-Spf

Pass (protection.outlook.com: domain of ae.d.mailin.fr designates 185.41.28.5 as permitted sender) receiver=protection.outlook.com; client-ip=185.41.28.5; helo=ae.d.mailin.fr; pr=C

Message-Id

<[email protected]>

Extracted URLs

  • file http://numerique.gouv.fr

  • file https://fonts.googleapis.com/css2?family=Inter

  • file https://fonts.googleapis.com/css2?family=Inter&display=swap

  • file https://hciabie.r.bh.d.sendibt3.com/im/7280184/0f7e5b28622cd8ada7afe1c1041c0b064d82df356e124c7ae6392c1757a813b2.jpeg?e=PSXkvs_YVgBu8-6AjL8MdXFMBxNiA-9UAdn2XYRSvR5GuiiiavCdy2OzXSgviJYvt3JIMbZrZ1ZWoel85wzvWW20L74XY_J8p8meQTZ7h279KkdMcSTrseZsKzNBOuc_Um8k2Q2645GRiooiAhetDYc5boMYWjfOGCnkvREUFDPKHkpzmaxIOU88jgo8DTHbgbvOQPNvwck2jdHwratKkPTnIAiRJ97gT1MvpsFzsPMXj_jzXUPjOcK-HJyRg39Hm3kK7GJXB7PW7MNiAINkSdTUohMaxfqf0UBqhA9ZIYQS05xAHYbZuB1OsRDl9L-uJmaR6y6W2hudKAz8D447_pBxFLtKTvuN

  • file https://hciabie.r.bh.d.sendibt3.com/im/7280184/33adbc9b92c28dc3a1bd1a63ffc952245b06676be5698a574d8f0335e2cd763f.png?e=pGeGhEG3NGTgN3ZklvJErahCHgU7U6xyrQ6x53a8bl6FDOH1_1X6KzqKK1oUhePcMb5H2xuiYp_QC6TlAv9eZ1qWewWT0qFH-mtREJX8IJKva72gB2iOHbAlDT7OlcDZU7SVgiXXowIsIKNMGkiSvFexpuXIWN3gALwZ8NN6V7AawfvCKBXrxdeL1lkCNzmVJhOs1rBYEGCeDGKrkmIFqIvol3fojGE-NsHflD5nTGxBw6Ob4oC7YvhZ06AAnDLxEtB1YrO_-JdGjPeraI9NlD1ZhYwC4-mEir2yqHK5cg_GZyvOejuI_SlpMD46H_1au7sZ8WGG6wLeuaxeCkZdpfhw90JmVc4

  • file https://hciabie.r.bh.d.sendibt3.com/im/7280184/4e6851d854dd8f80830b2c1a57a37c7787cfeac30bafa09b8f8cd0c032c4a051.png?e=Zc7xBYXEx5pFowdhIEKshPoOB3XE0vjsYtg9SJlsWAJNENiAfvgk5dJumhNREQbc2lHQFlJY8oKqpYoyUrWDoW5dqNWyM4jYJYjuJUq8ugh9O_LK2xXqQyyDicE9hphyNrh1X8wHWahENNea929KzZzerhR91NR9Z9U6yo-k6l_9PU5JTgEjnTb_cp97stEQAYQ01HedEcXIv-08seRfg-HSPg6HDN2ymO1Vwn3QxqU3hKPC8zYGFbNwkxbbVvm4xvOxNZa9ZIvMQ8MwJVe9epYoekqg_uK0AY4oSVS50YBYSmnp22zEamtS8SaAFBv10-MigjkPxogdbpZg7yLrakD3OYmtUkw

  • file https://hciabie.r.bh.d.sendibt3.com/im/7280184/58d504ca54310b36d2324aba7414dda84d12d40944af8e1d2325d638e3e8ed83.png?e=MlUnyc61hP1YxCo7j6uyGpKQ0RiPvApUG9EPE1gn05BdEI3_5jVFPB3qQfXPsJRK19dGgRDXRposiND5oeOFwLunY2_cmko7TiYjNpVzzrF1jtN0UbcRX1F6C6LAWAH1uYYWuuIOaNtOLplOxVejU_J9hTYURFzJAiXrEQ6xxeIW600Io_5PYl3Cg68xMMyY41_VPZk2x4rueuhyYLSol8gxRzFZJnf4_a3-eF6DM_ErA7YBpyJbOuER90wTlKqNSbqXmluhQ5yyWwwpqf71Ds-iEF-dOwMfXVeEGbs-PfGqazbCWdTWBj_7w7blBjEOo33rRgCLN44L5gEhHWGE2BckP3klMlU

  • file https://hciabie.r.bh.d.sendibt3.com/im/7280184/6c41d27fa920169d121c2d0e198af257af77dfe9c2ff224adbd9d5468006d915.jpg?e=cBt95fpQ_QSp-S5_RfMy5eEI2HPBo2p5-T2qKadYAU6K-HYy7T70GmzmmJ_b1Vr5E9laxqo-QS58dMO2ZGqIhupmiECXeErrzPubtNAsevVMTmJCcZ6cmhPY_2gXkTlbaJ2Umxf5gUwslSoKmE8a0Cg7gY0mYNvCiPnBxHAM97-KS3WMsRsFMmHFKoWA7Nl1UB7kScwdzDHmY0EjgK7iaR5lmXN-szlLntxVKjfkut3MA9J73nQ0KF-XcCVvRqYyyZvLaST4eiO3EOaIR16_thTyBjXX4rXO9L32HA_GL-5C_uP5pvViEYX8Y6dnkC9EDc4EK1VCY88wquNL4gxeMgRu1RnBP5Y

  • file https://hciabie.r.bh.d.sendibt3.com/im/7280184/acb00878b4b35ec6de19e6c1c4bc8f2e2d6fecdf354f95e3c991ee3327a50df0.png?e=6xJ0b8NnR9Nv3W1FVDHhfUwAE6YarraXKb8m9_HccoMIdBul__w-HNXefPVlRqNTq7Lofu5bY55EHjWJGwnEcZ-OTdAjiAcHEunpLVYm0_xjtC4Co7JfzFFeSl7WktJEpSW_HCwosNw0mG95qvF_539Y8eGuwOin6RfSvzP1Oble8RpXEJjXd6Z6h6mnNg2M8Le1lAgGfBP9S5gnrzwkvp3tTVE8pwBsMtatlKSz8TpoBlJck88Q4Tf3zwM3gGPs1I2PIB39xLkjJj2PexlPXrzyQqCNGXXtIYsaHZqJYOwulkblnGJNEab_CliysAC5LIgSn6dIHaapbplg0psQtieUz3WhRAc

  • Show all