From: Microsoft Outlook [email@example.com]The link in the email messages goes to www.prolococapena.com/yckzpntfyl/mahlqhltkh.html first and then downloads a file from www.prolococapena.com/yckzpntfyl/Invoice102740_448129486142_pdf.zip which contains exactly the same malicious executable being pushed in this earlier spam run.
Date: 19 September 2014 11:59
Subject: You have received a voice mail
You received a voice mail : VOICE976-588-6749.wav (25 KB)
Download and extract to listen the message.
We have uploaded voicemail report on dropbox, please use the following link to download your file:
Sent by Microsoft Exchange Server