Overview

overview

1

Static

static

1

suspected_...9).eml

windows10-2004-x64

1

suspected_...9).eml

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    suspected_phishing_email (89).eml
  • Size 19KB
  • Sample261102-the1aabt4t
  • SHA256 9ca05cf99902a0d349f1f96bc6973b51cb736b38a9b7b2fa6ea08513b9b635cd
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • suspected_phishing_email (89).eml
    .eml 19KB
  • email-html-1.txt
    .html 8KB

suspected_phishing_email (89).eml

  • SHA256 9ca05cf99902a0d349f1f96bc6973b51cb736b38a9b7b2fa6ea08513b9b635cd
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

[email protected]

Date

Mon, 02 Nov 2026 15:47:59 GMT

Mon, 2 Nov 2026 15:47:35 +0000

Subject

IT Landes Monthly Statement

IT Landes Monthly Statement

Content-Type

text/html; charset=UTF-8

Received

from LV2PR13MB994355.namprd13.prod.outlook.com (2603:10b6:408:3b1::19) by MN0PR13MB6789.namprd13.prod.outlook.com with HTTPS; Mon, 2 Nov 2026 15:47:58 +0000

from DS7P220CA0037.NAMP220.PROD.OUTLOOK.COM (2603:10b6:8:223::30) by LV2PR13MB994355.namprd13.prod.outlook.com (2603:10b6:408:3b1::19) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.569.12; Mon, 2 Nov 2026 15:47:41 +0000

from CY6PEPF0000004B.namprd03.prod.outlook.com (2603:10b6:8:223:cafe::4e) by DS7P220CA0037.outlook.office365.com (2603:10b6:8:223::30) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.569.12 via Frontend Transport; Mon, 2 Nov 2026 15:47:41 +0000

from us-smtp-delivery-102.mimecast.com (170.10.133.102) by CY6PEPF0000004B.mail.protection.outlook.com (10.167.247.136) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.592.5 via Frontend Transport; Mon, 2 Nov 2026 15:47:40 +0000

from PH0PR06CU001.outbound.protection.outlook.com (mail-westus3azon11021138.outbound.protection.outlook.com [40.107.208.138]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.3, cipher=TLS_AES_256_GCM_SHA384) id us-mta-2-F03DQIhKMcauzqKqX4oHHQ-4; Mon, 02 Nov 2026 10:47:36 -0500

from MW6PR22MB4174.namprd22.prod.outlook.com (2603:10b6:303:23f::10) by CO6PR22MB2881.namprd22.prod.outlook.com (2603:10b6:303:141::8) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.569.12; Mon, 2 Nov 2026 15:47:35 +0000

from MW6PR22MB4174.namprd22.prod.outlook.com ([fe80::3f9f:d8e3:356c:55f2]) by MW6PR22MB4174.namprd22.prod.outlook.com ([fe80::3f9f:d8e3:356c:55f2%6]) with mapi id 15.21.0569.011; Mon, 2 Nov 2026 15:47:35 +0000

Received-Spf

Pass (protection.outlook.com: domain of itlandes.com designates 170.10.133.102 as permitted sender) receiver=protection.outlook.com; client-ip=170.10.133.102; helo=us-smtp-delivery-102.mimecast.com; pr=C

Message-Id

<MW6PR22MB417491A950BD9728E2691BF3AA6A2@MW6PR22MB4174.namprd22.prod.outlook.com>

Extracted URLs

  • file https://aka.ms/LearnAboutSenderIdentification