General

  • Target
    97ee58297b5c2e4c67a9d1d5cf6b3308.eml
  • Size 103KB
  • Sample261113-e7ey9azx6j
  • SHA256 2e52924a3005d48514cf74c15aafeb7ef03ee0aa42deee4a43e5fac3223eab03
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • 97ee58297b5c2e4c67a9d1d5cf6b3308.eml
    .eml 103KB
  • attachment-3
    .eml 48KB
  • email-html-2.txt
    .html 43KB
  • email-plain-1.txt
    794B
  • email-html-2.txt
    .html 1KB
  • email-plain-1.txt
    99B

97ee58297b5c2e4c67a9d1d5cf6b3308.eml

  • SHA256 2e52924a3005d48514cf74c15aafeb7ef03ee0aa42deee4a43e5fac3223eab03
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

[email protected]

Date

Thu, 12 Nov 2026 16:49:51 +0000

Subject

Review Document

Content-Type

multipart/mixed; boundary="_935e3625-993e-4890-988c-cb15422a4f3b_"

Received

from YT4PR01CA0295.CANPRD01.PROD.OUTLOOK.COM (2603:10b6:b01:10e::6) by IA4PR07MB317323.namprd07.prod.outlook.com (2603:10b6:207:146::24) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.615.10; Thu, 12 Nov 2026 16:50:00 +0000

from DS4PEPF000001C0.namprd21.prod.outlook.com (2603:10b6:b01:10e:cafe::40) by YT4PR01CA0295.outlook.office365.com (2603:10b6:b01:10e::6) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.615.9 via Frontend Transport; Thu, 12 Nov 2026 16:50:00 +0000

from CY3PR05CU001.outbound.protection.outlook.com (2a01:111:f403:c112::7) by DS4PEPF000001C0.mail.protection.outlook.com (2603:10b6:f:fc00::246) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.639.0 via Frontend Transport; Thu, 12 Nov 2026 16:49:59 +0000

from BN8SPR01MB0036.namprd12.prod.outlook.com (2603:10b6:408:81::34) by IA1PR12MB6185.namprd12.prod.outlook.com (2603:10b6:208:3e7::21) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.592.11; Thu, 12 Nov 2026 16:49:55 +0000

from BN8SPR01MB0036.namprd12.prod.outlook.com ([fe80::17e6:b66a:4722:116f]) by BN8SPR01MB0036.namprd12.prod.outlook.com ([fe80::17e6:b66a:4722:116f%4]) with mapi id 15.21.0615.007; Thu, 12 Nov 2026 16:49:55 +0000

Received-Spf

Pass (protection.outlook.com: domain of wstruss.com designates 2a01:111:f403:c112::7 as permitted sender) receiver=protection.outlook.com; client-ip=2a01:111:f403:c112::7; helo=CY3PR05CU001.outbound.protection.outlook.com; pr=C

Message-Id

<BN8SPR01MB00366D980B38DEB224860FF6DC702@BN8SPR01MB0036.namprd12.prod.outlook.com>