2016-09-23 - BRAZLIAN MALSPAM - SUBJECT: ENTREGA CORREIOS (65412)

ASSOCIATED FILES:

  • 2016-09-23-traffic-from-Brazilian-malspam.pcap   (67,749 bytes)
  • 2016-09-22-1518-UTC-Brazilian-malspam-email.eml   (3,032 bytes)
  • Objeto(ID=RA981425152622BR).jar   (39,003 bytes)
  • Objeto.zip   (39,283 bytes)

 

NOTES:

 

EMAIL


Shown above:  Screenshot of the email.

 

DATE/SUBJECT/SENDER:

Date: 2016-09-22
Subject: Entrega Correios (65412)
Sender: [spoofed using the recipient's address]

 

MESSAGE TEXT:

Correiso Brasil AGORA NA WEB

Atençâo, foram realizadas 3 tentativas de entrega no seu endereço
Por motivo de ausência de destinatário sua encomenda
Retornou na data ( 19/09/2016 as 10:35:35 ) para nosso centro de distribuiçâo de encomendas e cartas.

OCORRENCIAS ID OBJETO: SR4373467347346346346BR (Visualizar)

15/09/2016 - 11:00 BRASIL - BRASIL R390002/XX Saiu para entrega

16/09/2016 - 14:30 CT BR - Agência Liberado Destinatário ausente
16/09/2016 - 16:30 CT BR - Agência Liberado Retornou p/ CTBR-Agencia
16/09/2016 - 18:30 CT BR - Agência Liberado Aguardando Retirada

Segue Anexo De Formulário para Retirada : (SR4373467347346346346BR) - (Abrir / Visualizar)

INFORMAÇÕES:

Sâo efetuadas 3 tentativas de entrega, sendo a primeira no mesmo dia da chegada do objeto na unidade de distribuiçâo.
A segunda e a terceira tentativa sâo realizadas nos dias úteis imediatamente subseqüentes.
Caso as 3 tentativas de entrega domiciliar sejam frustradas, o objeto ficará disponível para reenvio pelo prazo de 7 dias corridos.RN1

Política de Privacidade e notas legais - © Copyright 2016 Correios - Todos os direitos reservados.

 

MESSAGE TEXT GOOGLE TRANSLATED TO ENGLISH:

Subject: Post Delivery (65412)

Correiso Brazil NOW ON THE WEB

Attention, there were three delivery attempts at your address
Because of the absence of recipient your order
He returned on the date (9.19.2016 the 10:35:35) to our distribution center orders and letters.

OCCURRENCES OBJECT ID: SR4373467347346346346BR (View)

15/09/2016 - 11:00 BRAZIL - BRAZIL R390002 / XX Out for delivery

09/16/2016 - 14:30 CT BR - Agency Released Recipient absent
16/09/2016 - 16:30 CT BR - Agency Liberated returned p / CTBR-Agency
09/16/2016 - 18:30 CT BR - Agency Released Awaiting Withdrawal

The following Annex Form for Withdrawal: (SR4373467347346346346BR) - (Open / View)

INFORMATION:

3 delivery attempts are made, the first being the same day of arrival of the object in the dispensing unit.
The second and third attempt are held on weekdays immediately following.
If the 3 home delivery attempts are unsuccessful, the object will be available to order for a period of seven days corridos.RN1

Privacy policy and legal notices - © Copyright 2016 Correios - All rights reserved.

 

TRAFFIC


Shown above:  Traffic filtered in Wireshark.

ASSOCIATED URLS:

 

FILES


Shown above:  Contents of the downloaded ZIP file.

DOWNLOADED ZIP:

 


Shown above:  Contents of the extracted JAR file.

PAYLOAD:

 

FINAL NOTES

Once again, here are the associated files:

ZIP files are password-protected with the standard password.  If you don't know it, look at the "about" page of this website.

Click here to return to the main page.