Subject: new my info emails Bicicletes Nadal Oliver

Subject: new my info  Bicicletes Nadal Oliver emails...

Headers:

Subject: new my info

Message body:

Hello! I have found some interesting information that you might need!
Check out the attached file!

Bicicletes Nadal Oliver, S.L.
Passeig Ferrocarril, 61
07500 Manacor (Mallorca)
Illes Balears
Tel.971-843358
Web: www.bicicletesnadal.com

Attached to the email is a Zip file:

lh3i1for7an1t7k.zip

Inside the Zip file is a Windows Executable file (Note: filename is random)

Lemon.exe

Sha256 Hashes:

bb37ddbf6c4e7bf961b6e0968370633e3b89391455d0b8da389bb1a20e77aa48  [1]

Anti virus reports:

VirusTotal Report: [1] (Detection 3/56) Malwr Report: [1]

Cheers,
Steve
Sanesecurity.com

New Fax - "UK2Fax" {fax2@fax1.uk2fax.co.uk}

Important - Internal ONLY Administrator emails...

Headers:

Subject: New Fax - {random} From: "UK2Fax" {fax2@fax1.uk2fax.co.uk} Subject: New Fax - 02724381) Subject: New Fax - 0800 200 400) Subject: New Fax - 0845 3000 000) Subject: New Fax - 08457 404 404) Subject: New Fax - 08457 555 555) Subject: New Fax - 3901535011) Subject: New Fax - 800031031) Subject: New Fax - 800050606) Subject: New Fax - 800273336) Subject: New Fax - 800312316) Subject: New Fax - 800575757) Subject: New Fax - 800837455)

Message body:

UK2Fax Fax2Email : New fax attached, received at 21/04/2015 10:21:29 GMT

Attached to the email is a Zip file:

FAX_117_849721.zip

Inside the Zip file is a Windows Executable file (Note: filename is random)

FAX_117_849721.exe

Sha256 Hashes:

71ff5e3c9e74f6cad1d405b2172a76527396b05fa7767cf85be58da06c68fd28  [1]

Anti virus reports:

VirusTotal Report: [1] (Detection 3/56) Malwr Report: [1]

Cheers,
Steve
Sanesecurity.com

You win green card USA Green

Important - Internal ONLY Administrator emails...

Headers:

From: "USA Green" {casalsj466@networkadvertising.org} Subject: You win green card

Message body:

Your requested report is attached here. USA.

Attached to the email is a Zip file:

green_card_32328472389749823748923749823794823.zip

Inside the Zip file is a Windows Executable file (Note: filename is random)

green_card_32328472389749823748923749823794823.exe

Sha256 Hashes:

389502ac16c75ec71372937f87d959d0159db2c0b6b5d243071ca0e4fa0ebeaa  [1]

Anti virus reports:

VirusTotal Report: [1] (Detection 3/56) Malwr Report: [1]

Cheers,
Steve
Sanesecurity.com

Important - Internal ONLY Administrator

Important - Internal ONLY Administrator emails...

Headers:

From: "Administrator" {Administrator@domain.co.uk} Subject: Internal ONLY

Message body:

**********Important - Internal ONLY**********
File Validity: 21/04/2015 Company domain File Format: Adobe Reader Legal Copyright: Adobe Corporation.
Please follow this link : https://domain.co.uk/fileserver/reports/report2104 ********** Confidentiality Notice **********. This e-mail and any file(s) transmitted with it, is intended for the exclusive use by the person(s) mentioned above as recipient(s). This e-mail may contain confidential information and/or information protected by intellectual property rights or other rights. If you are not the intended recipient of this e-mail, you are hereby notified that any dissemination, distribution, copying, or action taken in relation to the contents of and attachments to this e-mail is strictly prohibited and may be unlawful. If you have received this e-mail in error, please notify the sender and delete the original and any copies of this e-mail and any printouts immediately from your system and destroy all copies of it.

The link in the email takes you to download this file:

https://www.sugarsync.com/pf/D7687781_714_129513481?directDownload=true

The link in the email download this Zip file:

report2104.zip

Inside the Zip file is a Windows Executable file (Note: filename is random)

report2104.exe

Sha256 Hashes:

71ff5e3c9e74f6cad1d405b2172a76527396b05fa7767cf85be58da06c68fd28 [1]

Anti virus reports:

VirusTotal Report: [1] (Detection 1/57) Malwr Report: [1]

Cheers,
Steve
Sanesecurity.com

Administrator - Exchange Email id

Administrator - Exchange Email id  with zip attachment...

Headers:

From: "Administrator@kimgreerdelightful" {Administrator Subject: Administrator - Exchange Email id2206592

Message body:

This attachment provides you with managing facilities for your mailboxes, public folders, distribution lists, contact and mail service general settings. Please save the attached file to your hard drive before deleting this message.

To open the attachment (Exchange_id2206592.zip) please use the following password: Ujh6JZ2mHN

Thank you,
Administrator

Attached to the email is a Zip file (Note: filename is random)

Exchange_id2206592.zip

Inside the Zip file is a Windows Executable file (Note: filename is random)

ExchangeEmail.exe

Sha256 Hashes:

2bfbe9563cb676c560a8269d66405f5b300379ff95574aa0565014ec0fca5d9f  [1]

Anti virus reports:

VirusTotal Report: [1] (Detection 21/57)

Cheers,
Steve
Sanesecurity.com