Y PARECE QUE EL CIBERDELINCUENTE DEL FUERBOOS LE HA COGIDO GUSTO A LOS .R00

---

Otros dos anexados a mails maliciosos son mas de lo mismo, ficheros RAR que contienen .PDF.EXE con Trojan Fuerboos





El texto del mail es el siguiente:



_____________





Asunto: Project Quote

De: "Priscilla Wittenberg" <priscilla.wittenberg@dnvkema.com>

Fecha: 20/11/2018 15:25

Para: "Priscilla Wittenberg" <priscilla.wittenberg@dnvkema.com>



Good greetings,







Hope you this email finds you well.







My name is priscilla, I am project manager at MAPCO LLC.



We are looking for reliable partner with own production to work together as a team on our upcoming projects.



I would like to ask you to send us quotation for the following project.







Please find attached one of the designs we are working on and also the description- we have 2 options.







CLIENT: VIVO GAMING



SHOW: NEW DESIGN 2019







For VIVO Gaming the budget is the most important and that's why we will need also your advise if we should change any of the elements and replace with something else, in order to have lower price.







If you have any questions, please let me know.







Wish you a great day ahead!







Best regards,











Priscilla Wittenberg







Project Manager



MAPCO LLC – Al Mazroui Group of Companies

P.O. Box 2035, Abu Dhabi, UAE

Tel + 971 2 678 3626





ANEXADOS:



New Design 6046_pdf.R00



Project 037385_pdf.R00





_____________



Y los informes de los ficheros extraidos de los empaquetados, son:



para el Project 037385_pdf.exe



https://www.virustotal.com/es/file/c3458ac608369a86464d81aa38f5cbb451f64e0744fbaee8c5e7a2b61cec0c6d/analysis/1542729453/



y para el otro: New Design 6046_pdf.exe



https://www.virustotal.com/es/file/ba34cd237ac2eaba30414e257fea0bb5840254254800df03bee9df00f32560d1/analysis/1542729668/





Los pasamos a controlar igualmente como TROJAN FUERBOOS, a partir del ELISTARA 40.14 de hoy





saludos



ms, 20-11-2018