From: james brown <jb73192@gmail.com>
Reply: jameswilfred61@gmail.com
Date: Sat, 18 Mar 2017 13:05:26 +0000
Subject: It's urgent .
Attachments
- image.png
[image: Inline image 1]
Tag: png
john latimer Dear Did you get my email It s urgent .
From: john latimer <latimerjohn00@gmail.com>
Date: Thu, 9 Mar 2017 12:51:54 +0000
Subject: Dear Did you get my email? It's urgent .
Attachments
- image.png
sam olele re
From: sam olele <samolele8@gmail.com>
Reply: samolele.office@gmail.com
Date: Tue, 28 Feb 2017 17:33:39 +0100
Subject: re
Attachments
- samolele123456.PNG
Chika Adams TO
From: Chika Adams <chikaadams11@gmail.com>
Date: Fri, 17 Feb 2017 12:02:36 +0000
Subject: TO
Attachments
- image.png
[image: Inline image 1]
Ecosoc IRREVOCABLE PAYMENT ORDER
From: Ecosoc <ecosoc2017@yandex.com>
Reply: Ecosoc <atm.dept2017@yandex.com>
Date: Tue, 7 Feb 2017 16:33:00 +0000 (UTC)
Subject: IRREVOCABLE PAYMENT ORDER
Attachments
- UN ECONOMIC AND SOCIAL COUNCIL.pdf
ECONOMIC AND SOCIAL COUNCIL ATTACHMENT IS COPY OF YOUR FUND APPROVAL NOTICE.
Technical Analysis
Attachment yields a match on VirusTotal.
Mrs Helen Wilson Information
From: Mrs Helen Wilson <xpng78678@gaia.eonet.ne.jp>
Reply: Mrs Helen Wilson <dhl.courier.servicessbenin@outlook.com>
Date: Thu, 19 Jan 2017 18:42:33 +0900 (JST)
Subject: Information
Information
Contact DHL Courier for your compensation Bank card valued $1,500,000.00 USD is been registered and your ATM CARD package is under Dr.Frank Edward's care reach him via email: (dhl.courier.servicessbenin@outlook.com) for more information
on how to claim it.
Best regards,
Mrs Helen Wilson
Nicole Adams From Nicole Adams
From: Nicole Adams <nadams784@essvvell.com>
Reply: Nicole Adams <adamsnicoledept11@outlook.com>
Date: Wed, 11 Jan 2017 19:36:53 +0000 (UTC)
Subject: From Nicole Adams
Attachments
- From Nicole Adams.pdf
VIEW THE ATTACHMENT DOCUMENTS I SENT TO YOU FOR DETAILS.
REGARDS.
NICOLE ADAMS.
Technical Analysis
The PDF attachment was flagged as suspicious by VirusTotal
FedEx Delivery Service @We Have A Delivery For You
From: "FedEx Delivery Service" <rfernandez@intertelcosv.com>
Reply: fdx41@outlook.in
Date: Mon, 02 Jan 2017 14:36:35 +0530
Subject: @We Have A Delivery For You
Attachments
- DELIVERY DETAILS.docx
See Attached File
Technical Analysis
This attachment contained a trojan 
The document details were interesting, in a way. Created on a Dell in 2014, recently modified (2016) on an Apple.
| creator | dell |
| lastModifiedBy | apple |
| revision | 37 |
| lastPrinted | 2016-03-11T18:43:00Z |
| created | 2014-04-07T14:09:00Z |
| modified | 2016-04-24T15:33:00Z |
Rico FWD: :NO SUBJECT
From: Rico <marydonatus1@gmail.com>
Reply: sabimarvel@yahoo.com
Date: Wed, 21 Dec 2016 13:18:11 -0800 (PST)
Subject: FWD: :NO SUBJECT
Attachments
- 0x675.png
Technical Analysis
All this had was a small image of a purchase order. This image you see is the best it gets. The Email have a clickable link which probably went off to a dodgy script.JAMES A YOUR CLAIM
From: JAMES A <2top201a@gmail.com>
Date: Tue, 22 Nov 2016 11:24:05 +0100
Subject: YOUR CLAIM
Attachments
- image.png
[image: Images intégrées 1]
Fred Gomeli
From: Fred Gomeli <tukali454@gmail.com>
Reply: fredgomelik@outlook.com
Date: Fri, 18 Nov 2016 12:55:05 +0000
Subject:
Attachments
- image.png
[image: Inline image 1]
FREIBRUN Nicolas cromwellsolution202@gmail.com
From: FREIBRUN Nicolas <nfreibrun@mincyt.gob.ar>
Date: Mon, 7 Nov 2016 09:58:17 +0000
Subject: <cromwellsolution202@gmail.com>
¿Está usted en necesidad de préstamo al 2% de tasa de interés anual? Póngase en contacto con nosotros para obtener más información a través de<cromwellsolution202@gmail.com>
Ms. Fidelia Santos Transfer Copy
From: "Ms. Fidelia Santos"<test@gambo-design.de>
Reply: <fedny2016@gmail.com>
Date: Tue, 1 Nov 2016 10:01:33 -0700
Subject: Transfer Copy !!!
Attachments
- transfer copy.zip
Dear Beneficiary,
We have transferred your long awaited payment of $500,000 into your bank account today
without any fee required from you.
Kindly download and check the attached scanned copies of the transfer slip for confirmation
if the Transfer was made into the right bank account and get back to us urgently.
Please confirm receipt.
Regards,
Fidelia Santos
Tel: 509 836 4239
United State Of America.
Analysis
This was a trojan as confirmed by Virus Total.
This Email was sent using the Email account test@gambo-design.de which appears to be a hacked account. The domain is a genuine German company who use a hosting company for their web services.
lawrence daga xxxxxx
From: lawrence daga <lawrencedaga@gmail.com>
Reply: hestersteve1970@gmail.com
Date: Mon, 31 Oct 2016 19:26:01 +0000
Subject: xxxxxx
Attachments
- Urgent Respond.docx
n.b. The document contained a single image.
Lissethe Brione hello
From: Lissethe Brione <amaliachase59@outlook.com>
Reply:
Date: Tue, 11 Oct 2016 09:13:51 +0000
Subject: hello
Attachments
- pastedImage.png
[cid:745650e4-a12c-4be9-8f36-48a8f1a3aab1]
Phillip Johnson good day.
From: Phillip Johnson <phillipj01670@gmail.com>
Reply:
Date: Tue, 4 Oct 2016 02:42:32 -0700
Subject: good day.
Attachments
- image.png
[image: Inline image 1]
SARAH BROWN hi
From: SARAH BROWN <robertnoose80@gmail.com>
Reply: mrssarahbrown11@gmail.com
Date: Mon, 3 Oct 2016 21:09:40 +0200
Subject: hi
Attachments
- image.png
[image: Inline image 1]
SMS Message – Congratulation!
This was a network message that appeared on my phone.Click here for the baiting