Thursday, 18 December 2014

malware: Myfax Internet Fax Job

Just received a "Myfax fax" for a new job....
 
Date: Thu, 18 Dec 2014 12:27:41 +0000
From: "MyFax" 
Subject: Internet Fax Job

Fax image data
http:/ / neyeradvisors DOT com/documents/fax.html
 
 
If you click on the random(ish) link (don't btw) you'll get a zip file,
which contains: 
 
fax8642174_pdf.exe
 
Note: it's an executable file and NOT a pdf.
 
Submitting the file to VirusTotal gives us a report of:
 
bb188ef8590840b72e4fa762e7e99124 (2/56 scanners hit)
 
Needless to say, the only job you'll get from this, it a PC cleaner :(
 
Detected as Sanesecurity.Malware.24672 (phish.ndb)
 
Cheers,
 
Steve
Sanesecurity.com 
  
 
 

1 comment:

fax to email said...

that's an interesting stuff! thanks for sharing.