Subject: RE:PI FOR NEW ORDER
Please see attached for your reference.
The proforma ivoice for new order to effect payment ASAP.
If you have any question or correction, please let me know.
Mrs Haisha Abdul.
Gulf Trade Co. Ltd
Al-Rai, Street No.22, Thailand
Tel : 1803803
Tel Fax : +(666) 24770292
There's a Rar file attached to the email:
Inside the Rar file is an exe file:
Malware Anti-Virus Reports:
- Collects information to fingerprint the system (MachineGuid, DigitalProductId, SystemBiosDate)
- Executed a process and injected code into it, probably while unpacking
- Installs itself for autorun at Windows startup