{
"headers"
: [
{
"From"
: [
{
"name"
:
"Mohd Mukhriz Ramli (MLNG/GNE)"
,
"addr"
:
"info@vm1599159.3ssd.had.wf"
}
],
"To"
: [
{
"name"
: "",
"addr"
: ""
}
],
"Subject"
:
"Re: Proforma Invoice"
,
"Date"
:
"2020-11-24 12:37:38 UTC+01:00"
,
"X-Originating-IP"
: []
}
],
"body"
: [
{
"type"
:
"text"
,
"content"
:
" \nDEAR SIR, \n\nPLEASE SIGN THE PROFORMA INVOICE SO THAT I CAN PAY AS SOON AS POSSIBLE.\n\nATTACHED IS THE PROFORMA INVOICE,\n\nPLEASE REPLY QUICKLY, \n\nTHANKS & REGARDS' \n\nRAJASHEKAR \n\n Dubai I Kuwait I Saudi Arabia I India I Egypt \nKuwait: +965 22261501 \nSaudi Arabia: +966 920033029 \nUAE: +971 42431343 \nEmail ID: help@rehlat.co [1]m\n \n\nLinks:\n------\n[1]\nhttps://deref-mail.com/mail/client/OV1N7sILlK8/dereferrer/?redirectUrl=https%3A%2F%2Fe.mail.ru%2Fcompose%2F%3Fmailto%3Dmailto%253ahelp%40rehlat.com"
}
],
"attachments"
: [
{
"type"
:
"doc"
,
"filename"
:
"Proforma Invoice.doc"
,
"filesize"
:
1826535
,
"md5"
:
"558c4aa596b0c4259182253a86b35e8c"
,
"sha1"
:
"63982d410879c09ca090a64873bc582fcc7d802b"
}
],
"vba"
: [],
"rtf"
: [
{
"is_ole"
: true,
"format_id"
:
2
,
"format_type"
:
"Embedded"
,
"class_name"
:
"EQUATion.3"
,
"data_size"
:
912305
,
"md5"
:
"a5cee525de80eb537cfea247271ad714"
}
],
"signatures"
: [
{
"name"
:
"rtf_suspicious_detected"
,
"description"
:
"RTF Suspicious Detected"
,
"severity"
:
3
,
"marks"
: [
{
"type"
:
"rtf"
,
"tag"
:
"rtf_suspicious_detected"
}
],
"markcount"
:
1
},
{
"name"
:
"rtf_exploit_detected"
,
"description"
:
"RTF Exploit Detected"
,
"severity"
:
9
,
"marks"
: [
{
"type"
:
"rtf"
,
"tag"
:
"rtf_exploit_detected"
}
],
"markcount"
:
1
}
]
}