Invitation to Review Materials and Submit Proposal for Upcoming Project[.]msg

General

Target
Invitation to Review Materials and Submit Proposal for Upcoming Project.msg
Size 120KB
Sample261110-3dlrpscd28
SHA256 977a3e1e41ba8a9e3dfb92dd6f0db2715d50f84b18f754497ebc025c1cf16997
MD5 6962806c34c78ece7f47ec57c0b1e0d9
SHA1 75b1c3cf3eb82be896d9508708bd430f0e23d4e1
SHA512 986f898b5bf7ca818cc9fe7ca9f91447f92144f616b62888e7092887c22c4f6a522fa657ba55aaa65a07279f9497bee1ae8e1a72b4ca8b048809bb2753d40db6
SSDEEP 1536:HlT09rA45KF1WKMt998f3qT/cIaJZ4akM2OSx3tZXHA0ChXTCwSGn:HlT09cNFQK499khIaJZNkV9Z3A0ClFN
TLSH
T179C33B253AF61215F2B7DF354DF16193863ABCA2AE35958F21C1330E0A71A41E861B7F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

Invitation to Review Materials and Submit Proposal for Upcoming Project.msg

.msg .pdf 120KB
Bs-D_protected.pdf

.pdf 55KB
image.png

.png 429B

Invitation to Review Materials and Submit Proposal for Upcoming Project.msg

SHA256 977a3e1e41ba8a9e3dfb92dd6f0db2715d50f84b18f754497ebc025c1cf16997
MD5 6962806c34c78ece7f47ec57c0b1e0d9
SHA1 75b1c3cf3eb82be896d9508708bd430f0e23d4e1
SHA512 986f898b5bf7ca818cc9fe7ca9f91447f92144f616b62888e7092887c22c4f6a522fa657ba55aaa65a07279f9497bee1ae8e1a72b4ca8b048809bb2753d40db6
SSDEEP 1536:HlT09rA45KF1WKMt998f3qT/cIaJZ4akM2OSx3tZXHA0ChXTCwSGn:HlT09cNFQK499khIaJZNkV9Z3A0ClFN
TLSH
T179C33B253AF61215F2B7DF354DF16193863ABCA2AE35958F21C1330E0A71A41E861B7F
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

Email Headers

Return-Path

<[email protected]>

Date

Tue, 10 Nov 2026 09:32:45 +0000

Subject

Invitation to Review Materials and Submit Proposal for Upcoming Project

Content-Type

multipart/mixed; boundary="_008_WA1P291MB221704C3E847524980C25DCEBAC4722WA1P291MB221704_"

Received

from localhost (127.0.0.1) (HELO v217.home.net.pl) by /usr/run/smtp (/usr/run/postfix/private/idea_relay_lmtp) via UNIX with SMTP (IdeaSmtpServer 6.4.2) id a5275ce747845e39; Tue, 10 Nov 2026 10:32:56 +0100

from WA0P291CU002.outbound.protection.outlook.com (mail-polandcentralazon11023086.outbound.protection.outlook.com [40.107.156.86]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-384) server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by mx.wikin.pl (Postfix) with ESMTPS id 696C643900D0; Tue, 10 Nov 2026 10:32:55 +0100 (CET)

from WA1P291MB221704.POLP291.PROD.OUTLOOK.COM (2603:10a6:1d0:4b::7) by WA0P291MB0271.POLP291.PROD.OUTLOOK.COM (2603:10a6:1d0:b::14) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.592.13; Tue, 10 Nov 2026 09:32:46 +0000

from WA1P291MB221704.POLP291.PROD.OUTLOOK.COM ([fe80::f365:aa5c:fc91:3146]) by WA1P291MB221704.POLP291.PROD.OUTLOOK.COM ([fe80::f365:aa5c:fc91:3146%6]) with mapi id 15.21.0592.012; Tue, 10 Nov 2026 09:32:46 +0000

Message-Id

<WA1P291MB221704C3E847524980C25DCEBAC4722@WA1P291MB221704.POLP291.PROD.OUTLOOK.COM>

Extracted URLs

file http://bs-d.pl
file http://www.bs-d.pl
file https://www.facebook.com/people/BSDsign/100049946172793/
file https://www.instagram.com/bsd_sign/

Sharing