Description
Cisco Security Intelligence Operations has detected significant activity related to spam e-mail messages that claim to contain a gift voucher for the recipient. The text in the e-mail message instructs the recipient to open the attachment for the voucher code. However, .zip attachment contains a malicious .scr file, which when executed, attempts to infect the target system with malicious code.
E-mail messages that are related to this threat (RuleID5034 and RuleID5034KVR) may contain the following files:
voucher.zip
voucher.scr
The voucher.scr file in the voucher.zip attachment has a file size of 122,880 bytes. The MD5 checksum, which is a unique identifier of the executable, is the following string: 0x32D03167D51A2D65E60646DA8CE2B2E4
A variant of the voucher.scr file in the voucher.zip attachment has a file size of 106,496 bytes. The MD5 checksum is the following string: 0xE6DD3C60FEB2E99F969ED0395C3FB756
The following text is a sample of the e-mail message that is associated with this threat outbreak:
Subject: Pixmania.com gift voucher code
Message Body:
Hello, Jolie has sent you 1 gift voucher to the value of 100 EUR.
You can find your voucher code in attachment below.
Then you need to open Pixmania.com. Once you verify your account, 100.00 EUR
will be credited to your account.
___________________________________________________________________________
How to use gift vouchers
1.Take your pick from over 1 300 000 products on Pixmania.com.
2. Click on the "Add to basket" button and submit your order.
3. At the payment stage of the ordering process, enter the claim code on your voucher and click "Confirm". Several gift
vouchers can be used to pay for the same order.
4. Your order is processed and your products are sent to you.
Terms and conditions
Gift vouchers and expiry dates
- Gift vouchers may be redeemed against any products on www.pixmania.com and are valid for 1 year following their date of purchase.
Gift voucher value and use
- The minimum value of a gift voucher is 10 EUR, and it must be used in full. If the total of your order exceeds the total value of the gift
voucher(s), you can pay the outstanding amount using another method of your choice. If the total value of the gift voucher(s) exceeds
the total amount due for your order, please note that you will not be reimbursed for the outstanding amount.
- Gift vouchers may not be exchanged for their equivalent monetary value, or be reimbursed either partially or in full.
Or
Subject: Pixmania.com gift voucher code
Message Body:
Hello, Josephine has sent you 1 gift voucher to the value of 100 EUR.
You can find your voucher code in attachment below.
Then you need to open Pixmania.com. Once you verify your account, 100.00 EUR
will be credited to your account.
___________________________________________________________________________
How to use gift vouchers
1.Take your pick from over 1 300 000 products on Pixmania.com.
2. Click on the "Add to basket" button and submit your order.
3. At the payment stage of the ordering process, enter the claim code on your voucher and click "Confirm". Several gift
vouchers can be used to pay for the same order.
4. Your order is processed and your products are sent to you.
Terms and conditions
Gift vouchers and expiry dates
- Gift vouchers may be redeemed against any products on www.pixmania.com and are valid for 1 year following their date of purchase.
Gift voucher value and use
- The minimum value of a gift voucher is 10 EUR, and it must be used in full. If the total of your order exceeds the total value of the gift
voucher(s), you can pay the outstanding amount using another method of your choice. If the total value of the gift voucher(s) exceeds
the total amount due for your order, please note that you will not be reimbursed for the outstanding amount.
- Gift vouchers may not be exchanged for their equivalent monetary value, or be reimbursed either partially or in full
Source: Cisco