Sponsored by..

Friday, 27 November 2015

Spam: "Integrated Petroleum Services" / "Transfer"

This malicious email sample was sent in by a contact (thank you), and contains a malicious attachment:

From: Integrated Petroleum Services
Sent: Friday, November 27, 2015 10:24 AM
Subject: Transfer


Please find attached the transfer order sent on Friday 27.

Best Regards
Attached is a file 20151126-291-transfer.xls (VT 1/53) containing this malicious macro [pastebin] which (according to this Malwr report) downloads from:


This binary has a VirusTotal detection rate of 3/55. The payload is the same as found in this spam run.

No comments: