MAIL MALICIOSO DESDE OMAN (ARABIA) ANEXANDO FICHERO SOSPECHOSO

Se recibe este mail:

TEXTO DEL MAIL
______________

Asunto: Emailing: Swift Message Advice
De: acc-state@oman-arabbank.com
Fecha: 19/11/2019 9:03
Para: “DESTINATARIO”

Dear “DESTINATARIO”

Please find attached your latest transfer details in SWIFT Format.
Kindly confirm when you receive it.

Regards

Oman Arab Bank

ANEXADO : Ref191119.ISO —> CONTIENE FICHERO MALICIOSO Ref191119.EXE

This email/attachment(s) thereto are intended solely for the addressee(s). Any form of use or taking of any action in reliance on information contained therein by other than the addressee is unauthorized, prohibited and unlawful. If you receive this message in error, notify the sender immediately by e-mail and delete material from all your systems. The Oman Arab Bank S.A.O.c does not represent that any attachment is free from computer viruses or defects and the user assumes all responsibility for any loss, damage or consequence resulting directly or indirectly from the use of any attachment. The information contained in any email does not necessarily reflect the views of the Oman Arab Bank S.A.O.c or any other related entities or persons.

____________

El informe del preanalisis de virustotal sobre el fichero anexado, ofrece el siguiente informe:

https://www.virustotal.com/gui/file/b0de9611fe4e9885fb728950e2253c9a3b14531757db8f163eebc94fd340d9f8/detection

Varios AV lo detectan como Trojan.Barys y lo pasamos a controlar a partir del ELISTARA de hoy

Como siempre avisamos que no se deben ejecutar fiucheros anexados a mails no solicitados, ni pulsar en sus imagenes ni enlaces …

saludos

ms, 10-1-2019