Description
Cisco Security Intelligence Operations has detected significant activity related to spam e-mail messages that claim to contain a resume from a job seeker for the recipient's review. The text in the e-mail message attempts to convince the recipient to open the attachment and view the details. However, the .rar attachment contains a malicious .scr file that, when executed, attempts to infect the system with malicious code.
E-mail messages that are related to this threat (RuleID5773) may contain any of the following files:
My DEtails Application.rar
My DEtails Application.scr
The My DEtails Application.scr file in the My DEtails Application.rar attachment has a file size of 227,464 bytes. The MD5 checksum, which is a unique identifier of the executable, is the following string: 0x91EDD6F533491088A53D1585F74C75F1.
The following text section is a sample of the e-mail message that is associated with this threat outbreak:
Subject: Fiscal Technician (Bellingham, WA)
Message Body:
I got your ads,hoping this position is still available kindly consider me for it ... complete information about me is attached here .....
i await your prompt response thanks
Source: Cisco Systems