Avance Grupo PRICE QUOTATION Esteban Trujillo email with an attached gzip fil. Email: “We expecting your competitive prices. Thank you and best regards” GZip file is a Windows Executable: “Sha256” Email address: “GZip file” Email body: “Attachment for our new order with productspecifications,” “Product Specifications” “Cheers, Steve,” he writes. GZip files: “Windows Executable” and “Malware Anti-Virus Reports””]
Source: http://sanesecurity.blogspot.com/2015/03/avance-grupo-price-quotation-esteban.html