From email@example.comAttached is a file Notice.zip which contains a malicious executable Value mortgage policy .exe (note the rogue space) which has a VirusTotal detection rate of 3/55. The Hybrid Analysis report shows activity consistent with Upatre/Dridex including a key indicator of traffic to 220.127.116.11 in Nigeria.
Date Fri, 18 Sep 2015 11:52:36 +0100
Subject Transaction confirmation
Please see attached the confirmation of transaction conducted from Your
account. Kindly sign and forward the copy to us for approval.
Your personal Manager
tel: 0345 300 0000