Australian Taxation Office - Refund Notification Brooks Fitzpatrick malware...
malware....
Headers: (example)
From: {Australian Taxation Office"
|
|
Message body (example)
IMPORTANT NOTIFICATION
Australian Taxation Office - 31/03/2015
After the last calculation of your fiscal activity we have determined that you are eligible to receive a refund of 2314.86 AUD.
To view/download your tax notification please click here or follow the link below :
https://www.ato.gov.au/AZItems.aspx?id=3673&category=Tax+legislation+and+regulations&sorttype=azindexdisplay&Disp=True?NotificationCode=notification_4188948
Brooks Fitzpatrick,
Tax Refund Department
Australian Taxation Office
| |
The above link, actually download a Zip file:
https://www.cubbyusercontent.com/pl/RYR3056967.zip/_de159fbeaefc42d9906a863782b21395
|
|
Inside the zip, is
Windows executable:
Sha256 Hashes:
7ac09282cc511758e59c72521151071b3feef7824aa25be51cb0e640ed747d98 [1] |
Malware Information:
VirusTotal Report [1] (hits 13/57 Virus Scanners)
Malwr Report [1]
Hybrid Analysis Report [1] |
Cheers,
Steve
Sanesecurity.com
No comments:
Post a Comment