Wednesday, 22 April 2015

HSBC Advising Service Payment Advice - Advice Ref CHAPS credits

HSBC Advising Service  Payment Advice - Advice Ref CHAPS credits email...

From: "HSBC Advising Service" 
Subject: Payment Advice - Advice Ref:[GB078486] / CHAPS credits
Message body:

Please download document from server, payment advice is issued at the 
request of our customer. The advice is for your reference only.

Download link:

Yours faithfully,
Global Payments and Cash Management
The link in the message body, when clicked auto-downloads from this site:
The above site, auto-downloads from:
The Zip is called:
Inside the Zip file is a Windows Executable file (Note: filename is random)
Sha256 Hashes:
 acf7af8a197ecbcc1a2ee24a359d7b6ead91223d3988b490e8c8c6896b001b4f    [1]
Anti virus reports:
VirusTotal Report: [1] (Detection 2/56)
Malwr Report: [1]
Hybrid Analysis Report: [1]


1 comment:

BK said...

Yeah, I got a few of these emails too, but now it comes with a PDF attachment, different email address etc.

Let me know if you want me to forward those to you.