The Dropbox logo
Hi *,
We just need to verify your email address before your sign up is complete!
Verify your email
Happy Dropboxing!
Email analysis :
NOTE : Received : from customer-PUE-207-103.megared.net.mx (unknown [177.245.207.103])
NOTE : verify@dropbox.com
LINK : http://floraisdobrasil.com.br/dropbox.html
NOTE : Received : from 189.89.7.60.telesa.com.br (unknown [189.89.7.60])
NOTE : verify@dropbox.com
LINK : http://basedow-bilder.de/dropbox.html
Phishing analysis :
CLICK : Verify your email
OPEN : http://floraisdobrasil.com.br/dropbox.html
SCREENSHOT :
CLICK : Verify your email
OPEN : http://basedow-bilder.de/dropbox.html
SCREENSHOT :
REDIRECT : http://wittinhohemmo.net/drop.php
OPEN : http://wittinhohemmo.net/drop.php
DOWNLOAD : Dropbox-MSGCODE-*.js
RESULT : Dropbox-MSGCODE-*.js is a virus
Virus analysis :
Arcabit HEUR.JS.Trojan.ba
Avira HTML/ExpKit.Gen2
Baidu JS.Trojan-Downloader.Nemucod.yo
Cyren JS/Agent.AAO1!Eldorado
F-Prot JS/Agent.AAO1!Eldorado
Qihoo-360 virus.js.qexvmc.1075
Rising Malware.Undefined!8.C (cloud:CVrV9ZfawJI)
Symantec JS.Downloader.D
TrendMicro Possible_Cerber-JS03b1
TrendMicro-HouseCall Possible_Cerber-JS03b1
ZoneAlarm HEUR:Trojan-Downloader.Script.Generic
Conclusion :
Virus stored for analysis...