Thursday, 26 February 2015

RA_New.zip NicolaR jhs co uk

RA_New NicolaR@jhs.co.uk now arriving with not very good detection rates...

Headers:
From: {NicolaR@jhs.co.uk}
Subject: RA 590182

Message body:

This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they are
addressed. If you have received this email in error please notify the
system manager. This message contains confidential information and is
intended only for the individual named. If you are not the named
addressee you should not disseminate, distribute or copy this e-mail.


Attached is a Zip file:
RA_New.zip
Inside the Zip is a Windows Executable:
RA_New.exe

Sha256 Hash:
29a6cca9ecf3007adfcc6a8e18d846630afd0b7a6636660bd26800f0a499ee3e     [1]

Malware Information:

VirusTotal Report [1] (hits 2/57 Virus Scanners)
Malwr Report [1]
Hybrid Analysis Report: [1]


Cheers,

Steve
Sanesecurity.com

1 comment:

Anonymous said...

Thanks again n for making us aware of these scams and viruses.