Tuesday, 31 March 2015

Be Wiser Insurance sales@bewiser.co.uk Your Quotation

Be Wiser Insurance sales@bewiser.co.uk Your Quotation email with a zip attachment...

Headers:
From: Office {sales@bewiser.co.uk}
Subject: BR:Hq32h - Your Quotation

Message body:
Dear Mrs, 

YOUR REFERENCE: BR:Hq32h 

 Thank you for your enquiry.

 We are pleased to confirm your quotation as attached.

 Please contact us on 0800 0111742 to start cover.

 Yours sincerely,

QUOTE WISER 
TEL: 0800 0111742 

OFFICE OPENING HOURS:

 Monday to Friday: 9:00AM   TO 9:00PM
 Saturday: 9:00AM   TO 6:00PM
 Sunday: 10:00AM   TO 4:00PM

Be Wiser Insurance is a trading name of Be Wiser Insurance Services Ltd.
Registered in England No. 6097813 Registered Office: Barrett House,
Savoy Close, Andover, Hampshire SP10 2HZ Authorised and Regulated by the
Financial Conduct Authority 

There's a Zip file attached to the email:
BR:Hq32h.zip

Inside the Zip file is a Windows Executable file:
Reference.exe
Sha256 Hashes:
e9f70dc57429e9af040890c2839f0e3c318432c6c9fd8c41d9277a64f19f4127

Malware Anti-Virus Reports (one example)
VirusTotal Report [1] (hits 3/57 Virus Scanners)
Malwr Report [1]
Hybrid Analysis Report [1]

Cheers,
Steve
Sanesecurity.com

No comments: