Overview

overview

3

Static

static

1

Message.eml

windows10-2004-x64

3

Message.eml

windows11-ltsc_2024-x64

3

email-html-1.html

windows10-2004-x64

3

email-html-1.html

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    Message.eml
  • Size 34KB
  • Sample261104-yp8ndsc13y
  • SHA256 566791b64fa70c0c7e002ce80b300fc99355f2b82df31f7e879deb05cebc32f8
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • Message.eml
    .eml 34KB
  • email-html-1.txt
    .html 23KB

Message.eml

  • SHA256 566791b64fa70c0c7e002ce80b300fc99355f2b82df31f7e879deb05cebc32f8
  • MD5 SHA1 SHA512 SSDEEP TLSH
Password
12345

Email Headers

Return-Path

[email protected]

Date

Wed, 4 Nov 2026 09:00:22 +0000 (UTC)

Subject

New Company Registration

Content-Type

text/html; charset=utf-8

Received

from CH2PR18CA0040.namprd18.prod.outlook.com (2603:10b6:610:55::20) by SA3PR13MB7509.namprd13.prod.outlook.com (2603:10b6:806:463::5) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.592.8; Wed, 4 Nov 2026 09:00:26 +0000

from BL6PEPF0006C3DD.namprd02.prod.outlook.com (2603:10b6:610:55:cafe::91) by CH2PR18CA0040.outlook.office365.com (2603:10b6:610:55::20) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.592.9 via Frontend Transport; Wed, 4 Nov 2026 09:00:26 +0000

from crab.pear.relay.mailchannels.net (23.83.216.42) by BL6PEPF0006C3DD.mail.protection.outlook.com (10.167.249.232) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.592.5 via Frontend Transport; Wed, 4 Nov 2026 09:00:25 +0000

from relay.mailchannels.net (localhost [127.0.0.1]) by relay.mailchannels.net (Postfix) with ESMTP id B50AB40117A; Wed, 04 Nov 2026 09:00:24 +0000 (UTC)

from fr-int-smtpout11.hostinger.io (100-99-176-144.trex-nlb.outbound.svc.cluster.local [100.99.176.144]) (Authenticated sender: hostingeremail) by relay.mailchannels.net (Postfix) with ESMTPA id 568BA402E66 for <[email protected]>; Wed, 04 Nov 2026 09:00:24 +0000 (UTC)

from fr-int-smtpout11.hostinger.io (fr-int-smtpout11.hostinger.io [148.222.54.47]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384) by 100.99.176.144 (trex/8.0.2); Wed, 04 Nov 2026 09:00:24 +0000

from localhost (117.138.230.35.bc.googleusercontent.com [IPv6:2a0b:7140:4:1:5054:ff:fe3d:47d1]) (Authenticated sender: [email protected]) by smtp.hostinger.com (smtp.hostinger.com) with ESMTPSA id 4jKKCV0fx4z10CZ for <[email protected]>; Wed, 4 Nov 2026 09:00:22 +0000 (UTC)

Received-Spf

Pass (protection.outlook.com: domain of navis-global.net designates 23.83.216.42 as permitted sender) receiver=protection.outlook.com; client-ip=23.83.216.42; helo=crab.pear.relay.mailchannels.net; pr=C

Message-Id

<[email protected]>