home

att00001.txt

MD5:
136aa29a6a87194af68e488e51b4cda8

SHA-1:
257e7b85a36a47470431f568e26e4aed68d34895

SHA-256:
3272d6c070a05759470e22d9da3e42335a2737dd5f889599750c932ad51ea14c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
1/9/2025 7:45:23 AM UTC  (today)

File size:
23 Bytes

Common path:
C:\users\{user}\downloads\att00001.txt

The file att00001.txt has been seen being distributed by the following 9 URLs.

https://owa2010.tel-aviv.gov.il/owa/attachment.ashx?attach=1&id=RgAAAABBXD/.../2SKlomLsyiEUNAAASyXxuAAAJ&attid0=BAAAAAAA&attcnt=1

https://attachment.outlook.office.net/owa/gibran_@hotmail.it/service.svc/s/GetFileAttachment?id=AQMkADAwATYwMAItYTU0NAAtYjNkYS0wMAItMDAKAEYAAAOuLFqJn6qgSJNHIHql8MAcBwC6/.../STjfgH7R7O6TQ8oVdyOAAAAvnSYAgAAAAESABAAET5yr6lb50S3seG fPZC8Q==&X-OWA-CANARY=xDfDHKTwME6pur9Xpe1497CXKzs2sdMY0uPmiI5mc4tBieaswQNuIT898yuDI2zJZ0tEV1EXCL4.&token=17e41d62-0b4f-43d6-8eba-3dd540dd99e0&owa=outlook.live.com&isc=1

https://attachment.outlook.office.net/owa/c.meccariello@hotmail.it/service.svc/s/GetFileAttachment?id=AQMkADAwATYwMAItOTU5NS1mODgAZi0wMAItMDAKAEYAAAOthk7cLt1xSat1HeyJ4E6tBwDdD/.../nXgKeyQ7NI4eq3LgK3AAAADLKa2wAAAAESABAAvDpI3XBOwkePsersPm9Oxg==&X-OWA-CANARY=0dKYRgIuI06sPr2WpWWHFBDFfl9jptMYbl2SMtqorEb0GfrbbTClWFCODV_okqsN3C2yaqQtRvc.&token=d3e0d87f-fd27-4f21-90b1-2fba4a848636&owa=outlook.live.com&isc=1

https://mail-attachment.googleusercontent.com/attachment/u/.../?ui=2&ik=7737c49808&view=att&th=15719e01ed82fc2a&attid=0.2&disp=safe&zw&saddbat=ANGjdJ_A2qtA15ZN6z_Yz316AUjEJ7Z_SpyXPXJnhdhFoikoXNxIdN-_qUglG8B9G0l5QNH1mR9B4b3jT_7aZQ8rfVnAWWJbHny064EckZoLuGWfT7_02lkY3_u7JguZZqSNvqrY6Kbmr3pcf4WQRzcnwBq1nqAGmm50Xrdpcnil1sYcVzfwV1IO1DRInkgZEWi8lX875EFiPq9RsplxUXpyRuyJQNt_isCBpmUCWTlsYnq6Ka-_qhRWBmaUvRHGGe5PzD1vHlbunUZFPn0ihBfMGxkYD6vFDfIiet0mg57p818IOXmejo8f4qqX5c6ebDdfoPP9r49nFVpQ_eNBda44jCmmMx93tvHPRVj_-nQ1dqGKiDqPXASyXtrSCnjKC98IfiYQTuneGbbqedNj95aB_zHmwAjrE-vcU6fepuJXsLEF3XAjn18mnlLWLcy-21MOj_tJrrJihGK7jVeVygk3O1qjxILltPGNvPIP0AhjB15SBEf_BNcKJDHsIXLlHGQc9uVdXVyqXnEoZMdiHkasvnd72i-wf-_TNh6bjNExb6TG6GEud8EOtPMx39OqIcycerU_VkMytcO4g1wf3EThWEHwf4ljfoaiiXRiD9TOPuhKrcUGKe84ToWzoYiX0EUVCph6rj5ZhvuwlWMorYdF9dwPoIuoXdlxu0gcQQ

https://attachment.outlook.office.net/owa/greenninjalady@hotmail.it/service.svc/s/.../Gpa k0 S397ZO8cNgw==&X-OWA-CANARY=cZSqkch1S0yB8CsL04aV-qBVqoGnsdMY1Vpkyqhk3p8Dl77bquZBdx2P7vQj9WzRpXerLniSTms.&token=25a20ce3-a1f7-43a7-b60f-a9a1d399be54&owa=outlook.live.com&isc=1

http://webmail2c.pc.tim.it/cp/ps/.../Downloader?uid=7304&d=alice.it&u=gianni.pascoletti&ai=1&t=d22d197d918463d12280&c=yes&an=DefaultMailAccount&filename=ATT00001.txt&l=it&fp=INBOX&dhid=attachmentDownloader&disposition=attachment

https://dub129.afx.ms/.../GetAttachment.aspx?file=dea87ff6-0d6a-4657-a081-2a7259e60860.txt&ct=dGV4dC9wbGFpbg_3d_3d&name=QVRUMDAwMDEudHh0&inline=0&rfc=0&empty=False&cid=16e64dedea97bb91&shared=1&entryPt=download&biciPrevious=d9ffd3e9-0fee-4d6c-a338-2f47ed603bee_011709518af_5729&hm__login=avv.santalucia&hm__domain=live.it&ip=10.148.150.8&d=d3074&mf=0&hm__ts=Thu, 26 May 2016 14:30:22 GMT&st=(000300008B286BEE)&hm__ha=01_fc625c901c68c3e4550444001549e3510495bc2b0f8fb80515c8391fee9d9dd9&oneredir=1

https://webmaildomini.aruba.it/cgi-bin/ajaxmail/.../octet-finite-length&BodyCnt=VEVYVC9wbGFpbg==&nocache=483183.472319663

https://attachment.outlook.office.net/owa/franvit63@hotmail.it/service.svc/.../GetFileAttachment?id=AQMkADAwATY0MDABLWQwYzUtOTFmZgAtMDACLTAwCgBGAAADz0RJSiojxUOQf5 jGJwLlQcAphVZHIA5K0OETZIv23 LFwAAAgEKAAAAphVZHIA5K0OETZIv23 LFwAAAC70s4oAAAABEgAQAG3q6OphTI9Cn58At9eHhFlz&X-OWA-CANARY=HEOtYBvEv0qICtMcg1Cwx0CKO6I0F9MY8F6YlPjBk3K3I2p6Y5aiVcmz0x4FWcT9cP53Nqb2Yh8.&token=bf143c5f-1d5d-4cf3-9da6-829d889f9eb2

Scan att00001.txt - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.