Overview

overview

1

Static

static

1

Potential ...B).msg

windows10-2004-x64

1

Potential ...B).msg

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    Potential Phish (37.5 KB).msg
  • Size 74KB
  • Sample261110-sqlx5ayz7m
  • SHA256 0fb9a3380e02b233d2dc85388aefe3e6306109f543728ffe1b476e14e2d44685
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • Potential Phish (37.5 KB).msg
    .msg 74KB

Potential Phish (37.5 KB).msg

  • SHA256 0fb9a3380e02b233d2dc85388aefe3e6306109f543728ffe1b476e14e2d44685
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Delivered-To

[email protected]

Return-Path

rachel_storey+[email protected]

Date

Mon, 09 Nov 2026 20:09:32 +0000

Subject

Invitation to respond to the form " Book survey "

Content-Type

multipart/alternative; boundary="===============0360481584746243704=="

Received

from DM8PR04MB7815.namprd04.prod.outlook.com (2603:10b6:8:34::23) by SJ0PR04MB7198.namprd04.prod.outlook.com with HTTPS; Mon, 9 Nov 2026 20:09:43 +0000

from MW4PR04CA0062.namprd04.prod.outlook.com (2603:10b6:303:6b::7) by DM8PR04MB7815.namprd04.prod.outlook.com (2603:10b6:8:34::23) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.592.13; Mon, 9 Nov 2026 20:09:38 +0000

from SJ5PEPF000001CE.namprd05.prod.outlook.com (2603:10b6:303:6b:cafe::70) by MW4PR04CA0062.outlook.office365.com (2603:10b6:303:6b::7) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.592.13 via Frontend Transport; Mon, 9 Nov 2026 20:09:37 +0000

from mx0a-00332601.pphosted.com (148.163.133.252) by SJ5PEPF000001CE.mail.protection.outlook.com (10.167.242.38) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.615.4 via Frontend Transport; Mon, 9 Nov 2026 20:09:37 +0000

from pps.filterd (m0266389.ppops.net [127.0.0.1]) by mx0a-00332601.pphosted.com (8.18.1.11/8.18.1.11) with ESMTP id 6A9HIEoV384603 for <[email protected]>; Mon, 9 Nov 2026 20:09:37 GMT

from mail-dl1-f51.google.com (mail-dl1-f51.google.com [74.125.82.51]) by mx0a-00332601.pphosted.com (PPS) with ESMTPS id 4hsun0w749-1 (version=TLSv1.3 cipher=TLS_AES_128_GCM_SHA256 bits=128 verify=NOT) for <[email protected]>; Mon, 09 Nov 2026 20:09:36 +0000 (GMT)

by mail-dl1-f51.google.com with SMTP id a92af1059eb24-15dd124bbe7so1209866c88.1 for <[email protected]>; Mon, 09 Nov 2026 12:09:36 -0800 (PST)

by 2002:a05:7022:1081:b0:1b3:4e92:520f with SMTP id ep1csp52870dlb; Mon, 9 Nov 2026 12:09:33 -0800 (PST)

from mail-sor-f69.google.com (mail-sor-f69.google.com. [209.85.220.69]) by mx.google.com with SMTPS id a1e0cc1a2514c-99c1fd334a8sor147591241.6.2026.11.09.12.09.33 for <[email protected]> (Google Transport Security); Mon, 09 Nov 2026 12:09:33 -0800 (PST)

X-Received

by 2002:a05:701b:4587:b0:1b2:3e9b:3dcd with SMTP id a92af1059eb24-1b3b6054cc7mr620919c88.10.1794254976115; Mon, 09 Nov 2026 12:09:36 -0800 (PST)

by 2002:a05:6102:370a:b0:7d0:6db8:dc3d with SMTP id ada2fe7eead31-7d301ab1268mr189930137.5.1794254973529; Mon, 09 Nov 2026 12:09:33 -0800 (PST)

by 2002:a05:6102:689c:b0:7d2:cddd:935a with SMTP id ada2fe7eead31-7d301ba40abmr135208137.16.1794254972626; Mon, 09 Nov 2026 12:09:32 -0800 (PST)

Received-Spf

Pass (protection.outlook.com: domain of g.gcpsk12.org designates 148.163.133.252 as permitted sender) receiver=protection.outlook.com; client-ip=148.163.133.252; helo=mx0a-00332601.pphosted.com; pr=C

pass (google.com: domain of 3fcjyahqkapmymdqz-ncvmzn-ijmzkgtbjjbgz.xjh@doclist.bounces.google.com designates 209.85.220.69 as permitted sender) client-ip=209.85.220.69;

Message-Id

<[email protected]>

Extracted URLs

  • file http://g.gcpsk12.org

  • file http://www.google.com/accounts/TOS

  • file http://www.google.com/google-d-s/terms.html

  • file https://docs.google.com/forms/d/e/1FAIpQLSfz5LkYKEjUAansj1HhC0ah5p0HXSZwTr1YXBDIzuoItJwvAQ/formResponse

  • file https://docs.google.com/forms/d/e/1FAIpQLSfz5LkYKEjUAansj1HhC0ah5p0HXSZwTr1YXBDIzuoItJwvAQ/reportabuse?source=https://docs.google.com/forms/d/e/1FAIpQLSfz5LkYKEjUAansj1HhC0ah5p0HXSZwTr1YXBDIzuoItJwvAQ/viewform

  • file https://docs.google.com/forms/d/e/1FAIpQLSfz5LkYKEjUAansj1HhC0ah5p0HXSZwTr1YXBDIzuoItJwvAQ/viewform

  • file https://docs.google.com/forms/d/e/1FAIpQLSfz5LkYKEjUAansj1HhC0ah5p0HXSZwTr1YXBDIzuoItJwvAQ/viewform?usp=mail_form_link

  • file https://docs.google.com/forms?usp=mail_form_link

  • file https://fonts.gstatic.com/s/i/short-term/release/googlesymbols/domain_disabled/default/20px.svg

  • Show all