Static

static

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    phish_alert_sp2_2.0.0.0.eml
  • Size 21KB
  • Sample261104-2vrtlsdz6v
  • SHA256 51a861490be85537046e3052c021e1e0df02f3369337bcbe38937fbd469b5da5
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • phish_alert_sp2_2.0.0.0.eml
    .eml 21KB
  • email-html-1.txt
    .html 11KB

phish_alert_sp2_2.0.0.0.eml

  • SHA256 51a861490be85537046e3052c021e1e0df02f3369337bcbe38937fbd469b5da5
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

[email protected]

Date

Wed, 4 Nov 2026 21:34:02 +0000

Subject

=?UTF-8?B?W0VYVEVSTkFMXSBZb3VyIENoZXZyb24gQnVzaW5lc3MgSUQ=?=

Content-Type

multipart/mixed; boundary="----sinikael-?=_1-17938305717350.8954588345090538"

Received

from DS0PR16MB6854.namprd16.prod.outlook.com (2603:10b6:8:30e::19) by CH3PR16MB5352.namprd16.prod.outlook.com with HTTPS; Wed, 4 Nov 2026 21:34:07 +0000

from SJ0PR13CA0240.namprd13.prod.outlook.com (2603:10b6:a03:2c1::35) by DS0PR16MB6854.namprd16.prod.outlook.com (2603:10b6:8:30e::19) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.592.8; Wed, 4 Nov 2026 21:34:05 +0000

from SJ1PEPF00002322.namprd03.prod.outlook.com (2603:10b6:a03:2c1:cafe::60) by SJ0PR13CA0240.outlook.office365.com (2603:10b6:a03:2c1::35) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.615.4 via Frontend Transport; Wed, 4 Nov 2026 21:34:05 +0000

from esa.hc2860-13.iphmx.com (216.71.140.137) by SJ1PEPF00002322.mail.protection.outlook.com (10.167.242.84) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.592.5 via Frontend Transport; Wed, 4 Nov 2026 21:34:04 +0000

from ec2-18-220-88-77.us-east-2.compute.amazonaws.com (HELO localhost) ([18.220.88.77]) by esa2.hc2860-13.iphmx.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 04 Nov 2026 15:34:04 -0600

Received-Spf

Pass (protection.outlook.com: domain of chevron.com designates 216.71.140.137 as permitted sender) receiver=protection.outlook.com; client-ip=216.71.140.137; helo=esa.hc2860-13.iphmx.com; pr=C

Message-Id

<[email protected]>

Extracted URLs

  • file https://aka.ms/LearnAboutSenderIdentification

  • file https://okta.chevron.com/tokens/Ii4u4DVjGQPc7ZMXEuLQ/verify