Benign Download

VirusShare_5d67ad1139a354738b0c3902f6216ab4

Shipping-order lure mail with zipBulk Dear-All mail with zip

SHA-2562cdc64d4777bdefc2dddce34c83af90cff2a165dde9afe9f7482f76e31c66f4d

MaleculeO(Xe)

Evidence

Shipping-order lure wording lines 5–15

5:47… utere.ro>
6X-Quarantine-ID: <VPjl3nRdWAw1>
7X-Amavis-Alert: BANNED, message contains .exe,.exe-ms,PARKING LIST.exe
8X-Spam-Flag: NO
9X-Spam-Score: 0
⋯6 lines

Bulk Dear-All mail greeting lines 46–51

46:53… ration-thickness: initi=
47al; text-decoration-style: initial;=20
48text-decoration-color: initial">Dear All,<BR><BR>Please find attached&nbsp;=
49Parking&nbsp;list for your confirmation.</P>
50<P class=3DMsoNormal style=3D"FONT-SIZE: small; FONT-FAMILY: Arial, Helveti=
51ca, sans-serif; WHITE-SPACE: norma …

Zip mail part with attachment disposition lines 200–208

200:12… PAN></A></SPAN></U></P></BODY></HTML>
201------=_NextPart_000_0012_8BE86BBE.C9640EA1
202Content-Type: application/zip; name="PARKING LIST.zip"
203Content-Transfer-Encoding: base64
204Content-Disposition: attachment; filename="PARKING LIST.zip"
⋯4 lines