Be Wiser Insurance sales@bewiser.co.uk Your Quotation

Be Wiser Insurance sales@bewiser.co.uk Your Quotation email with a zip attachment...

Headers:

From: Office {sales@bewiser.co.uk} Subject: BR:Hq32h - Your Quotation

Message body:

Dear Mrs, YOUR REFERENCE: BR:Hq32h Thank you for your enquiry. We are pleased to confirm your quotation as attached. Please contact us on 0800 0111742 to start cover. Yours sincerely, QUOTE WISER TEL: 0800 0111742 OFFICE OPENING HOURS: Monday to Friday: 9:00AM TO 9:00PM Saturday: 9:00AM TO 6:00PM Sunday: 10:00AM TO 4:00PM Be Wiser Insurance is a trading name of Be Wiser Insurance Services Ltd. Registered in England No. 6097813 Registered Office: Barrett House, Savoy Close, Andover, Hampshire SP10 2HZ Authorised and Regulated by the Financial Conduct Authority

There's a Zip file attached to the email:

BR:Hq32h.zip

Inside the Zip file is a Windows Executable file:

Reference.exe

Sha256 Hashes:

e9f70dc57429e9af040890c2839f0e3c318432c6c9fd8c41d9277a64f19f4127

Malware Anti-Virus Reports (one example)

VirusTotal Report [1] (hits 3/57 Virus Scanners) Malwr Report [1] Hybrid Analysis Report [1]

Cheers,
Steve
Sanesecurity.com