Monday, 26 January 2015

Scanned Image HP Digital Device malware

Scanned Image HP Digital Device malware in the form of a html email, with an attached ScannedImage.zip

Headers:
From: "HP Digital Device" {HP_Printer@yourdomain.co.uk}
Subject: Scanned Image
Message body:
Please open the attached document.

This document was digitally sent to you using an HP Digital Sending device.

-------------------------------------------------------------------------------
This email has been scanned for viruses and spam.
-------------------------------------------------------------------------------

Attached to the email is a ZIP file:
ScannedImage.zip

On the Windows machine, Inside the zip, is Windows executable 
ScannedImage.scr

Md5 Hashes:
01a1593b32b1d170dbb5a28eb8582c32

Malware Information:

VirusTotal Report [1] (hits 4/57 Virus Scanners)

Malwr Report [1]


Hybrid Analysis Report [1]

Cheers,

Steve
Sanesecurity.com

No comments: