Y un mail con texto largo …

Y un mail con texto largo

Asunto: Your order has been despatched
De: customer.service@hiltonworkshops.co.uk
Fecha: 01/08/2017 11:21
Para: destinatario

Dear Customer

The attached document* provides details of items that have been packed and are ready for despatch.

Please use your tracking number (contained within the attached document) to monitor the progress of your shipment.

Customer Services (for customers in the UK mainland)
Call: 03332 406406
Email: cs@hiltonworkshops.co.uk

Opening Hours:
Mon – Fri: 8am – 6pm
Saturday: 9am – 5pm

Export Sales (for customers outside UK mainland)
Call: +44 1297 33666
Email: exportsales@hiltonworkshops.co.uk

Opening Hours:
Mon – Fri: 8am – 5.30pm (GMT)

Kind regards

Axminster Tools & Machinery
Unit 10 Weycroft Avenue, Axminster EX13 5PH
http://www.hiltonworkshops.co.uk

* In order to read or print the attached document, you will need to install Adobe Reader. You can download Adobe Reader free of charge by visiting http://www.adobe.com/products/acrobat/readstep2.html

anexado: EMAIL_9719667574_sat.zip <— conteniendo UQ.js con malware JS NEMUCOD

El informe actual de virustotal es
https://www.virustotal.com/es/file/f02f0f0f730071c03a153d0bbcc5be601463c8125524684f36f442f83371d18f/analysis/1501591608/

Se trata de otro NEMUCOD, que descarga e instala nuevo malware, en funcion del momento

Repetimos una vez mas QUE NO SE DEBEN EJECUTAR FICHEROS ANEXADOS A MAILS NO SOLICITADOS, NI PULSAR EN ENLACES NI IMAGENES

saludos

ms, 1-8-2017