Email Emailing: P5261326.JPG contains trojan


MX Lab, http://www.mxlab.eu, started to intercept a new malware distribution campaign by email with the subject “Emailing: P5261326.JPG”.

This email is send from the spoofed addressees and has the following body:

The message is ready to be sent with the following file or link attachments:
P5261326.JPG

Note: To protect against computer viruses, e-mail programs may prevent sending or receiving certain types of file attachments. Check your e-mail security settings to determine how attachments are handled.

The attached file P5261326.JPG contains the folder P9479021. Inside this folder the file P9479021.exe is present.

Note that the filenames and subject name, the number part, can vary with each email.

The malware is detected by 14/61 AV engines at Virus Total and the analysis is available on Malwr.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s