Malware: Sage Invoice

Another Sage invoice, which is is supposed to be a pdf...

Date: Fri, 19 Dec 2014 13:42:58 +0200
From: "Sage"
Subject: FW: Invoice_8822271 ~

Please see attached copy of the original invoice (sage_invoice_127139_982109.pdf)

sage_invoice_127139_982109.zip

Zip contains sage_invoice_127139_982109.scr (which is executable)


Submitting to VirusTotal:

Md5 hash: 77a103ddd3fcb414d9cd5fe8f353c87 [6/55]

Cheers,

Steve
Sanesecurity