Email “Faxnachricht von unknown an 03212-1298305” contains trojan

MX Lab,, started to intercept a new trojan distribution campaign by email with the subject “Faxnachricht von unknown an 03212-1298305”.

This email is send from the spoofed address “”WEB.DE Fax und Voice” <>” and has the followingvery short body:

Fax und Voice

The attached ZIP file has the name WEB.DE Fax und and contains the 120 kB large file WEB.DE Fax und Voice.exe.

The trojan is known as TR/Dropper.VB.3500, Virus.Win32.Heur.p, Trojan.Packed.25042, Win32/TrojanDownloader.Wauchos.X, PE:Trojan.VBInject!1.64FE or Troj/Agent-AFAX.

At the time of writing, 15 of the 48 AV engines did detect the trojan at Virus Total.

Use the Virus Total permalink and Malwr permalink for more detailed information.
SHA256: 8d2fe8b6c370c0568f93bb4eee838dc4514f2cc5578424b7376ed21e4ca9091b

One thought on “Email “Faxnachricht von unknown an 03212-1298305” contains trojan

Comments are closed.