OTRO MAIL MASIVO QUE SE ESTA RECIBIENDO ANEXANDO FICHERO CON PWS STEALER (ALIAS FAREIT)

Se está recibiendo otro mail masivo con este contenido:

Asunto: RE:PO#240717 NEW ORDER
De: “Huynh Cong”<huynh.cong@hotmail.com>
Fecha: 24/07/2017 3:49
Para: hunynh.cong@outlook.com

Hello

Please we want some of your new displayed items on your website

Kindly find attached our purchase order and give us your current available product price list,Best FOB Prices with clear photos of your latest catalog, Payment term ( LC or TT ), MOQ & ETD.

Also put into consideration time as i will want this products delivered first week of August
awaiting your prompt response.

Huyn Cong
Sales Manager
Thank and Best Regards,
Minh Tien Design & Printing Packaging Co.,Ltd.
Office: 17-1-4 U Ghe Street, Tam Phu Wards, Thu Duc Dist. Ho Chi Minh City
Tel: 08.2218.1960 – 08.2229.1970 – Fax: 08.5422.4738
Email:huynh.cong@hotmail.com,
Web: www.inminhtien.com

El preanalisis de virustotal ofrece el siguiente informe:

MD5 57c393190fbda804a21a6f7ea2640c06

SHA1 1a972958518a5739e48d14bd06ef23560334d004

Tamaño del fichero 536.6 KB ( 549504 bytes )

SHA256: b8dcf52d7a348b18c18371a99c0a146bc31ff893747ff6e2411152c33fece8ae

Nombre: PO

Detecciones: 27 / 63

Fecha de análisis: 2017-07-24 08:23:47

UTC ( hace 0 minutos )

total:

Dicha variante de PWS Stealer (cazapasswords) pasa a ser controlado a partir del ELISTARA 37.32 de hoy, que estará disponible en nuestra web a partir del 25.7 prox.

saludos
ms, 24.7.2017