Wednesday, 1 April 2015

Australian Taxation Office - Refund Notification Brooks Fitzpatrick

Australian Taxation Office - Refund Notification Brooks Fitzpatrick malware...
 malware....


Headers: (example)
From: {Australian Taxation Office" 

Message body (example)
IMPORTANT NOTIFICATION


Australian Taxation Office - 31/03/2015


After the last calculation of your fiscal activity we have determined that you are eligible to receive a refund of 2314.86 AUD.


To view/download your tax notification please click here or follow the link below :

https://www.ato.gov.au/AZItems.aspx?id=3673&category=Tax+legislation+and+regulations&sorttype=azindexdisplay&Disp=True?NotificationCode=notification_4188948


Brooks Fitzpatrick,
Tax Refund Department
Australian Taxation Office
The above link, actually download a Zip file:
https://www.cubbyusercontent.com/pl/RYR3056967.zip/_de159fbeaefc42d9906a863782b21395

Inside the zip, is Windows executable:
RYR3056967.scr
Sha256 Hashes:
7ac09282cc511758e59c72521151071b3feef7824aa25be51cb0e640ed747d98  [1]
Malware Information:

VirusTotal Report [1] (hits 13/57 Virus Scanners)

Malwr Report [1]

Hybrid Analysis Report [1]

Cheers,

Steve
Sanesecurity.com

No comments: