From: Voice Mail [voicemail_sender@local]As you might expect, the attachment VoiceMail.zip does not contain a voice mail at all, but it is a malicious executable VoiceMail.scr which has a a VirusTotal detection rate of 3/53.
Subject: You have received a new VoiceMail
Date: Thu, 24 Jul 2014 17:31:25 +0700 [06:31:25 EDT]
You have received a voice mail message.
Message length is 00:03:27.
The CAMAS report and Anubis report shows the malware downloading an encrypted file from the followng locations:
egozentrica.com/wp-content/uploads/2014/07/tor2800_2.7z
reneerlaw.com/wp-content/uploads/2014/07/tor2800_2.7z
Blocking those sites may give some protection against this malware.
No comments:
Post a Comment