Wednesday, 18 February 2015

You have received a new debit Lloyds TSB PLC details

You have received a new debit Lloyds TSB PLC being spammed out 
containing a details.zip attachment.

Message Header:
From: {PaymentsAdmin@lloydstsb.co.uk}
Subject: You have received a new debit
Message Body:
Monday 18 February 2015

This is an automatically generated email by the Lloyds TSB PLC
LloydsLink online payments Service to inform you that you have receive a
NEW Payment.

The details of the payment are attached.

This e-mail (including any attachments) is private and confidential and
may contain privileged material. If you have received this e-mail in
error, please notify the sender and delete it (including any
attachments) immediately. You must not copy, distribute, disclose or use
any of the information in it or any attachments.

 Attachment filename:
details.zip

Inside the Zip file is a Windows Executable:
details.exe

Md5 Hashes:
bba02ac76bddeef9366df26af6da78a2 [1]

Malware  information:

VirusTotal Report [1] (hits 2/57 Virus Scanners)

Malwr Report [1]


Hybrid-Analysis Report [1]

Cheers,
Steve

No comments: