An email resembling official communication was intercepted. It is suspected of being a phishing attempt by APT36 to gain initial access. The email was sent from a known malicious IP address and contains an attachment with a suspicious hash.