Monday, 16 March 2015

CREDIT 89371 JamesKernohanandSons Invoice

Just to explain the post here The Zip attachments are actually corrupted at the moment.

So, although the attached Invoice 89371.zip should be a zip file, it actually contains Base64... ooops...

UEsDBBQAAAAIAFZhcEZ5lvkyzuoCAF9CAwAVAAAASW52b2ljZV84OTM3MS5wZGYuZXhlzFt5
PFXBHr/XvjPO6drCTYt9yxKyRJZUokK27Pt2ZF9LC6mo8Eq7iBItQmhDokWEJKWEskX2rGHe


Which is a Zip file... containing the following filename:

Invoice_89371.pdf.exe
Which is also corrupted, hence no malware scans on what it is.

Cheers,

Steve
Sanesecurity.com

No comments: