Teresa Byron supply only quotation ECY Armco

Teresa Byron supply only quotation ECY Armco emails are being spammed out, with a zip attachment

Note: It's also worth remembering that the company itself  may not have any knowledge of this email and it's link(s) or attachment as it won't have come from their servers and IT systems but from an external bot net. It's not advised to ring them as there won't really be anything they can do to help you.

Message Header:

From: {wendy@burwoodsupply.co.uk}Subject: supply only quotation 16822 in total

Message Body

Hi  Attached are 1 quotes so far they are in excel format so they can be altered if necessary (I normally only send the quotes in PDF so they can’t be altered but Mike asked me not to do this). The rest to follow tomorrow a.m. Regards Teresa Byron Office Administrator  ECY  Armco  Barley Castle Lane, Appleton Thorn, Warrington, Cheshire, WA4 4RB  t: +44(0)1925 860000  f: +44(0)1925 861111www.ecyltd.co.uk

Attachment:

quotes.zip

Inside the Zip is a Windows Executable:

quotes.exe

Md5 Hashes:

88b675427fa05236a3f3e03a68ac600f  [1]

Malware information:

VirusTotal Report [1] (hits 8/57 Virus Scanners)

Cheers,

Steve

Sanesecurity.com