Wednesday, 25 March 2015

Denver Norman - My resume primeraeng.com

Denver Norman - My resume primeraeng.com email with an attached zip file containing a ,js file.

Headers:
Subject: Denver Norman - My resume
From: Denver {DenverNorman@primeraeng.com}
Message body:
Attachment: text

There's a Zip file attached to the email:
Denver Norman - My resume.zip

Inside the Zip file is an .JS file (JavaScript):
Denver Norman - My resume.js
Sha256 Hashes:
1db1d4ea6c8b40808c32a7444ee2fda0317e17592b6c8529f8f695cab0d77f48    [1]

Malware Anti-Virus Reports:
VirusTotal Report [1] (hits 3/57 Virus Scanners)
Malwr Report [1]

Cheers,
Steve
Sanesecurity.com

No comments: