Subj : trojan inside xls file
To   : All
From : August Abolins
Date : Tue Mar 10 2020 05:11 pm

I forgot to mention..  that the file arrived as:


invoice_867545.xls   ..but when sent to Virus total, it was a different name:

  Results at VirusTotal:

  6 engines detected this file

  invoice_507574.xls
  64.00 KB


BTW.. I sent it to Google Sheets (to see if I could peek at the payload
mechanism details  ..apparently it operates via a macro), but it seems to be
neutered there without any reason.


  http://pics.rsh.ru/img/scam-invoice-0_xljlzkeh.jpg

  http://pics.rsh.ru/img/scam-invoice-1_ow9bs085.jpg



-- 
Kad esat sagriezis maizi, to vairs nevarat salikt.

--- TB68.4.1/Win7
 * Origin: nntp://rbb.fidonet.fi - Lake Ylo - Finland (2:221/360.0)

.