Description
Cisco Security Intelligence Operations has detected significant activity related to spam e-mail messages that claim to contain a personal picture sharing notification for the recipient. The text in the e-mail message attempts to convince the recipient to open the attachment and view the pictures. However, the .zip attachment contains a malicious .exe file that, when executed, attempts to infect the system with malicious code.
E-mail messages that are related to this threat (RuleID5739) may contain any of the following files:
EPS00348.zip
EPS00348.exe
The EPS00348.exe file in the EPS00348.zip attachment has a file size of 57,856 bytes. The MD5 checksum, which is a unique identifier of the executable, is the following string: 0x3154C9FD18326C0143E5CE590FAA88F3
The following text section is a sample of the e-mail message that is associated with this threat outbreak:
Subject: Sorry to disturb you.
Message Body:
Someone sent me thee pictures they seem to be from you and your boyfr=end I'm really troubled by this why do you send
your private naked p=otos around?? this is beyound my understanding. It's in attachment
Source: Cisco Systems