Subj : trojan inside xls file
To   : All
From : August Abolins
Date : Tue Mar 10 2020 05:11 pm

I forgot to mention..  that the file arrived as:


invoice_867545.xls   ..but when sent to Virus total, it was a different name:

 Results at VirusTotal:

 6 engines detected this file

 invoice_507574.xls
 64.00 KB


BTW.. I sent it to Google Sheets (to see if I could peek at the payload
mechanism details  ..apparently it operates via a macro), but it seems to be
neutered there without any reason.


 http://pics.rsh.ru/img/scam-invoice-0_xljlzkeh.jpg

 http://pics.rsh.ru/img/scam-invoice-1_ow9bs085.jpg



--
Kad esat sagriezis maizi, to vairs nevarat salikt.

--- TB68.4.1/Win7
* Origin: nntp://rbb.fidonet.fi - Lake Ylo - Finland (2:221/360.0)

You are viewing proxied material from vert.synchro.net. The copyright of proxied material belongs to its original authors. Any comments or complaints in relation to proxied material should be directed to the original authors of the content concerned. Please see the disclaimer for more details.