From: "Frederic Nichols"
Subject: PL REMITTANCE DETAILS ref825235IN The attached remittance details the payment of £720.58 made on 16-DEC-2014 by BACSE. This email was generated using PL Payment Remittance of Integra Finance System. Can you please check that your supplier details are correct, if any changes are required please email back to this email address quoting your remittance reference. 825235IN.xls (random filename)
Four Variants (md5 hashes below)
Update: the live malware from one of the download locations, seems to
have been run by 96,120 people already :(
h t t p : / / [remove]38 DOT 96 DOT 175 DOT 139:8080/stat/stati.php