Description
Cisco Security Intelligence Operations has detected significant activity related to spam e-mail messages that claim to contain lawsuit information and a criminal complaint for the recipient. The text in the e-mail message attempts to persuade the recipient to open the attachment to view the details. However, the .zip attachment contains a malicious .scr that, when executed, attempts to infect the system with malicious code.
E-mail messages that are related to this threat (RuleID5841) may contain the following files:
lawsuit_complaint.zip
lawsuit_complaint.scr
The lawsuit_complaint.scr file in the lawsuit_complaint.zip attachment has a file size of 91,648 bytes. The MD5 checksum, which is a unique identifier of the executable, is the following string: 0xD8E1BD3BA6A88114AA6CAB26E851202C
The following text is a sample of the e-mail message that is associated with this threat outbreak:
Subject: Re:
Message Body:
Enclosed you can find the lawsuit details,including the criminal complaint.
Thank you,
Ronald Williams
Source: Cisco Systems