Thursday, 26 March 2015

Van Mcknight - My resume VanMcknight@cbr.com.cn

Van Mcknight - My resume VanMcknight@cbr.com.cn email with an attached zip file containing a ,js file.

Headers:
Subject: Van Mcknight - My resume
From: Van {VanMcknight@cbr.com.cn}
Message body:
Hi, my name is Van Mcknight
My resume is attached for your consideration

Sincerely,
Van

There's a Zip file attached to the email:
Van Mcknight - My resume.zip

Inside the Zip file is an .JS file (JavaScript):
Van Mcknight - My resume.js
Sha256 Hashes:
 5f199d4789c5f96effddd1476c911a765455acbab723a1ac7b72e9ef715bb710   [1]

Malware Anti-Virus Reports:
VirusTotal Report [1] (hits 5/57 Virus Scanners)
Malwr Report [1]

Cheers,
Steve
Sanesecurity.com

No comments: