top of page
Email Analysis
 

In this Lab I analyzed a maliscous email by going through the process of:

  1. Using Notepadd++ to open the email.

  2. Using CyberChef to convert the data from the email to base64/HEX

  3. Used HXD to view the contents of the emailed files as hex format

  4. Confirmed the file signatures using  GarryKessler site​

Converting to email contents to Hex
notepad++.png
Where the email came from and the reply to did not match. Making this suspicious, also the spf failed with the ip in question not being a permitted sender.
Looking up the file signature using GaryKessler
hdx.png
GaryKessler.png
bottom of page