Dynamoo’s Blog – by Conrad Longmore
I’ve had quite a few spams with a similar payload to this that I can’t even Unzip. Go figure. But this one is an interesting variation.
Date: Mon, 23 Dec 2013 10:05:38 -0500 [10:05:38 EST] From: Notice to Appear [support.6@jonesday.com] Subject: Hearing of your case in Court NR#6976
Notice to Appear,
Hereby you are notified that you have been scheduled to appear for
your hearing that
will take place in the court of Washington in January 9, 2014 at 10:00
am.
Please bring all documents and witnesses relating to this case with
you to Court on your hearing date.
The copy of the court notice is attached to this letter.
Please, read it thoroughly.
Note: If you do not attend the hearing the judge may hear the case in
your absence.
Yours truly,
Alison Smith
Clerk to the Court.
There is an attachment Court_Notice_Jones_Day_Wa#8127.zip which in turn contains an executableCourt_Notice_Jones_Day_Washington.exe which is presumably malicious, but I can’t analyse it. The VirusTotal detection rate for the ZIP is 4/49.
Updated: a couple of other variants.. and the ISC have a report now too.
Date: Mon, 23 Dec 2013 20:02:52 -0400 [19:02:52 EST] From: Notice to Appear [ticket_support.6@jonesday.com] Subject: Hearing of your case in Court NR#2682
Notice to Appear,
Hereby you are notified that you have been scheduled to appear for
your hearing that
will take place in the court of Washington in January 15, 2014 at
09:00 am.
Please bring all documents and witnesses relating to this case with
you to Court on your hearing date.
The copy of the court notice is attached to this letter.
Please, read it thoroughly.
Note: If you do not attend the hearing the judge may hear the case in
your absence.
Yours truly,
Olivia Tailor
Clerk to the Court.————–
Date: Mon, 23 Dec 2013 11:21:46 -0700 [13:21:46 EST] From: Notice to Appear [ticket_support.8@jonesday.com] Subject: Notice of appearance in court NR#5365
Notice to Appear,
Hereby you are notified that you have been scheduled to appear for
your hearing that
will take place in the court of Washington in January 19, 2014 at
09:00 am.
Please bring all documents and witnesses relating to this case with
you to Court on your hearing date.
The copy of the court notice is attached to this letter.
Please, read it thoroughly.
Note: If you do not attend the hearing the judge may hear the case in
your absence.
Yours truly,
Jennifer Tailor
Clerk to the Court.
————–
Date: Mon, 23 Dec 2013 21:37:10 -0700 [12/23/13 23:37:10 EST] From: Notice to Appear [ticket_support.8@jonesday.com] Subject: Urgent court notice NR#31620
Notice to Appear,
Hereby you are notified that you have been scheduled to appear for
your hearing that
will take place in the court of Washington in January 11, 2014 at
11:00 am.
Please bring all documents and witnesses relating to this case with
you to Court on your hearing date.
The copy of the court notice is attached to this letter.
Please, read it thoroughly.
Note: If you do not attend the hearing the judge may hear the case in
your absence.
Yours truly,
Barbara Smith
Clerk to the Court.
http://blog.dynamoo.com/2013/12/hearing-of-your-case-in-court-nr6976.html