OTRO MAIL QUE LLEGA ANEXANDO UN FICHERO .ISO con un cazapasswords

---

En otro mail recibido hoy, aparece este texto:



________________





Asunto: Re::Proforma Invoice_SFAT000734_ALT1900034+STC1900009

De: Wilhelm Kurt<wilhelm.k@agrartechnik-sachsen.de>

Fecha: 15/04/2019 22:49

Para: destinatario



Good Morning,



I didn't get your respone for my previous mail and you didn't pick up my calls either?



Pls I want to you to know that the buyer and the delivery address all should be changed into GRAHAM INVESTMENT GMBH for this order. I have changed it and pls find the correct one as attached.

Help to arrange the transportation for this order by Sea or Express. pls notes that the destination is Denmark no longer Russia as we used before.





Thanks and Best regards,





Alex James,

Sales Manager











---------- Forwarded message ---------:



On Friday March 29. 2019 at 09:34 wrote Wilhelm Kurt< wilhelm.k@agrartechnik-sachsen.de >



Good day,



kindly note that I will like to change the address for the shippment, beacuse of some reasons I will not be using the previous address for this order.

Please let me know if this is okay by you.



waiting for your kind respond.



Thanks,





Wilhelm Kurt,

Sales Manager







ANEXADO: Proforma Invoice_19000091900009.ISO ---> FICHERO EMPAQUETADO CONTENIENDO FICHERO MALICIOSO Proforma Invoice_19000091900009.COM





_______________







El fichero contenido en dicho empaquetado que llega anexado en el ISO, ofrece el siguiente informe en virustotal:

https://www.virustotal.com/es/file/e376f71f7b845b3412ebf677514f4140b7e6932f27ecd3ebcbda93b38ccfe484/analysis/1555337369/





Dicho fichero es un cazapasswords que pasamos a controlar a partir del ELISTARA 41.10 de hoy como MALWARE OBJECT







Mucho cuidado con ello !



saludos



ms, 15-4-2019