Friday, 27 March 2015

Avance Grupo PRICE QUOTATION Esteban Trujillo

Avance Grupo PRICE QUOTATION Esteban Trujillo email with an attached gzip fil.

Headers:
From: "Esteban Trujillo " {info@avance.co}
Subject: PRICE QUOTATION
Message body:
ATT:

FROM: Avance Grupo Empresarial
DATE: 26 /03 / 2015

Please check the attachment  for our new order with product
specifications
and send me your offer with reasonable PRICE QUOTATION,
Hope to establish a long term relationship with your company.

We expecting your competitive prices.

Thank you and best regards.

Esteban Trujillo Monsalve
Director Comercial
Avance Grupo Empresarial
C + 57 3206900079
T + 574 4440659
www.avance.co

There's a GZip file attached to the email:
PO_3400.gz

Inside the GZip file is a Windows Executable:
Copy_3400.scr
Sha256 Hashes:
 cdc653b9624153b2c06bedb35db31754a2ebeac380d83b4af5e5781015c6528d   [1]

Malware Anti-Virus Reports:
VirusTotal Report [1] (hits 5/57 Virus Scanners)
Malwr Report [1]
Hybrid Analysis Report [1]

Cheers,
Steve
Sanesecurity.com

No comments: