Overview

overview

10

Static

static

1

HR_Update_...26.vbs

windows10-2004-x64

10

HR_Update_...26.vbs

windows11-ltsc_2024-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    PHISHING MAIL Fw Pembaruan HR Laporan Kinerja dan Penyelesaian Administrasi Karyawan Oktober 2026.msg
  • Size 93KB
  • Sample261109-bc4scasy9l
  • SHA256 eaf94df5929e7926605e923f5548311e82fdc151471166c0692ff66000e0502f
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • PHISHING MAIL Fw Pembaruan HR Laporan Kinerja dan Penyelesaian Administrasi Karyawan Oktober 2026.msg
    .msg 93KB
  • HR_Update_Performance_Clearance_Oct2026.arj
    .zip 42KB
  • HR_Update_Performance_Clearance_Oct2026.vbs
    84KB

PHISHING MAIL Fw Pembaruan HR Laporan Kinerja dan Penyelesaian Administrasi Karyawan Oktober 2026.msg

  • SHA256 eaf94df5929e7926605e923f5548311e82fdc151471166c0692ff66000e0502f
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

In-Reply-To

[email protected]

Return-Path

[email protected]

Date

Mon, 9 Nov 2026 07:41:06 +0700

Subject

=?Windows-1252?Q?PHISHING_MAIL_Fw:_Pembaruan_HR:_Laporan_Kinerja_dan_Peny?= =?Windows-1252?Q?elesaian_Administrasi_Karyawan_=96_Oktober_2026?=

Content-Type

application/ms-tnef; name="winmail.dat"

Received

from IGDL-EXC2.iconpln.co.id (10.14.23.81) by IGDL-EXC2.iconpln.co.id (10.14.23.81) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.1748.26 via Mailbox Transport; Mon, 9 Nov 2026 07:41:07 +0700

from IGDL-EXC2.iconpln.co.id (10.14.23.81) by IGDL-EXC2.iconpln.co.id (10.14.23.81) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.1748.26; Mon, 9 Nov 2026 07:41:07 +0700

from IGDL-EXC2.iconpln.co.id ([10.14.23.81]) by IGDL-EXC2.iconpln.co.id ([10.14.23.81]) with mapi id 15.02.1748.026; Mon, 9 Nov 2026 07:41:07 +0700

Message-Id

<[email protected]>

Extracted URLs

  • file http://vinfastmydinh.vn