Tuesday, 21 April 2015

Administrator - Exchange Email id

Administrator - Exchange Email id  with zip attachment...

Headers:
From: "Administrator@kimgreerdelightful" {Administrator
Subject: Administrator - Exchange Email id2206592
Message body:
This attachment provides you with managing facilities for your mailboxes, public folders, distribution lists, contact and mail service general settings. Please save the attached file to your hard drive before deleting this message.

To open the attachment (Exchange_id2206592.zip) please use the following password: Ujh6JZ2mHN

Thank you,
Administrator
Attached to the email is a Zip file (Note: filename is random)
Exchange_id2206592.zip
Inside the Zip file is a Windows Executable file (Note: filename is random)

ExchangeEmail.exe
Sha256 Hashes:
2bfbe9563cb676c560a8269d66405f5b300379ff95574aa0565014ec0fca5d9f  [1]
Anti virus reports:
VirusTotal Report: [1] (Detection 21/57)

Cheers,
Steve
Sanesecurity.com

No comments: