From: Forrest Cleveland
Date: 6 January 2016 at 11:23
Subject: STA19778072 - BACS PAYMENT
Wasn’t sure who to email.
I don’t know if you have been asked but Statestrong Products Ltd are making one payment today for two cars. Could you let me know when it is in the account please as these are both collections tomorrow.
YG15XVK paid set up fee by card
£455.99 Incl vat rental
£210 setup fee
£431.99 Incl vat rental
Total - £2097.98
So far I have seen three different attachment variants (VirusTotal results   ) and these Malwr reports    indicate the same general characteristics as this spam run. However in this case the dropped file tsx3.exe has been updated and the new version has a detection rate of 6/54. The Malwr report indicates very similar traffic to before.