New Word malware: UKSM Invoice 12959596


MX Lab, http://www.mxlab.eu, started to intercept a new malware distribution campaign by email with the subject “UKSM Invoice 12959596”.

This email is send from the spoofed address “Willa Tyler <TylerWilla61718@torontocorporatevideo.com>” and has the following body:

Good time of day,

Thank you for choosing UK Safety Management Ltd. to carry out your Portable Appliance Testing.

Please find enclosed your invoice.

Willa Tyler
www.uksafetymanagement.co.uk

The attached file invoice12959596.doc is a Word file with malicious macro.

The malware is detected as HEUR(high).VBA.Trojan or CXmail/OleDl-A by 2 of the 54 AV engines at Virus Total.

Use the Virus Total or HybridAnalysis for more detailed information.
SHA256: e080c0ab0ff8a2ab7a41bff8f66c22bc8aac3aa22cc301b8e4e566e20ba99004

One thought on “New Word malware: UKSM Invoice 12959596

Comments are closed.