docusign.net Spam: Please DocuSign this document : Company Changes - Internal Only
Please DocuSign this document : Company Changes - Internal Only
Wer eine Mail mit dem Betreff Code:
"Please DocuSign this document : Company Changes - Internal Only"
Erhält, sollte diese an uns weiterleiten.
From: "DocuSign Service" <dse@docusign.net>
(gefälschter Absender)
Betreff: Please DocuSign this document : Company Changes - Internal Only
****************************************************************************************************************************************************************************************************************
******************************************************************************************* Your document has been completed********************************************************************************************************************
******************************************************************************************* Sent on behalf of
administrator@trojaner-board.de.
******************************************************************************************************************************************* *******************************************************************************************
All parties have completed the envelope 'Please DocuSign this document: Company Changes - Internal Only..pdf'.*********************** To view or print
the document download the attachment .********************************************************************************************************************************************
********************************************************************************************************************************************************************
(self-extracting archive, Adobe PDF)******************* ****************************************** This document contains information confidential and
proprietary to trojaner-board.de******************* ******************************************************************************************* LEARN MORE:**
New Features* |* Tips & Tricks* |* Video Tutorials********************************************************************************************************************
*************************************************************** **************************************************************************************************************************
DocuSign. The fastest way to get a signature.*********************** If you have questions regarding this notification or any**** enclosed documents requiring
your signature, please contact the sender**** directly. For technical assistance with the signing process, you can email support.***********************
This message was sent to you by
administrator@trojaner-board.de
who is using the DocuSign Electronic Signature Service. If you would rather not receive email from this sender you may contact the sender with your request.*******************************************
********************************************** ***
DocuSign Logo
Your document has been completed
Sent on behalf of
administrator@trojaner-board.de.
All parties have completed the envelope 'Please DocuSign this document: Company
Changes - Internal Only..pdf'.
To view or print the document download the attachment .
(self-extracting archive, Adobe PDF)
This document contains information confidential and proprietary to
trojaner-board.de
LEARN MORE: New Features
<http://www.docusign.com/products/whats-new-with-docusign>
| Tips & Tricks
<http://community.docusign.com/t5/Tips-Tricks/bd-p/Tips_and_Tricks>
| Video
Tutorials
<http://www.docusign.com/resources/training-videos>
*DocuSign. *The fastest way to get a signature.
If you have questions regarding this notification or any enclosed documents
requiring your signature, please contact the sender directly. For technical
assistance with the signing process, you can email support
<mailto:service@docusign.com>.
This message was sent to you by
administrator@trojaner-board.de
who is using the
DocuSign Electronic Signature Service. If you would rather not receive email
from this sender you may contact the sender with your request.
Es hängt an:
Company Changes - Internal Only.PDF.rar
Rund 10,1KB
Virustotal Ergebniss der enthaltenen Exe-Datei: https://www.virustotal.com/de/file/e...is/1383836275/
SHA256:
e5344f3b2944312d6b1c0a907f9808fc968f553bdfc7a87796a28a1e45098ee5
Dateiname:
Company Changes - Internal Only.PDF.exe
Erkennungsrate:
6 / 42
AntiVir
TR/Yarwi.B.19
Malwarebytes
Trojan.Downloader
McAfee
Downloader-FVO!03C3407D732A
McAfee-GW-Edition
Heuristic.LooksLike.Win32.Suspicious.J!81
Sophos
Mal/EncPk-ZC
TheHacker
Backdoor/SdBot.05.ar
Es handelt sich hierbei um Upatre
Der folgene Autostart eintrag wird erstellt: HKEY_USERS\Software\Microsoft\Windows\CurrentVersion\Run
uggop
C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Eqseyh\uggop.exe
Dies ist die Banking Malware Trojan.Zbot
Die Malware verbindet Zu folgenen Hosts: picklingtank.com/images/slade1.exe
frontierforex.com/images/trade.exe
Wer eine solche, oder ähnliche verdächtige Mail erhält, möge diese an uns weiterleiten. markusg - trojaner-board.de
- Mails, die man erhält, immer gründlich lesen.
- wer den Anhang geöffnet hatt, bitte ein Thema bei uns eröffnen. Log-Analyse und Auswertung - Trojaner-Board
- wer in sozialen Netzwerken aktiv ist, sollte den Link zu diesem beitrag ruhig teilen, um andere zu warnen Code:
http://www.trojaner-board.de/144203-docusign-net-spam-please-docusign-this-document-company-changes-internal-only.html
| 